Changes between Version 8 and Version 9 of HLKTesting


Ignore:
Timestamp:
05/03/19 09:04:58 (5 years ago)
Author:
Samuli Seppänen
Comment:

Add HLK OpenVPN server setup instructions

Legend:

Unmodified
Added
Removed
Modified

  • HLKTesting

    v8 v9  
    3232For tap-windows6 testing a couple of extra nodes are needed:
    3333
    34 * OpenVPN server
     34* OpenVPN server (for "Run tests" in HLK, see below)
    3535* Support machine: required by some of the HLK tests
    3636
    … …  
    4242For HLK software installation please refer to the official MS documentation, check out [https://github.com/Puppet-Finland/puppet-hlk/ puppet-hlk] or try out the [https://docs.microsoft.com/en-us/windows-hardware/test/hlk/getstarted/getstarted-vhlk Windows Virtual Hardware Lab Kit].
    4343
    44 = Preparing for test-signed drivers =
     44= Preparing for installation of test-signed drivers =
    4545
    4646Installation of HLK client software automatically enables test signing mode in Windows. Tap-windows6 build system supports test-signing the driver automatically. You need to put the automatically generated test certificate to the Windows certificate store on the HLK clients. After that you can install the test-signed driver without signature errors.
     47
     48= OpenVPN setup for HLK =
     49
     50The "Run tests" in HLK fail consistently unless the tap-windows6 adapter has an IPv6 gateway address. This can be resolved by installing an OpenVPN server and joining all HLK clients connect to it. Launching OpenVPN client on the HLK client creates an instance of tap-windows6 adapter on the system with proper IPv6 gateway address.
     51
     52OpenVPN server configuration is fairly simple:
     53
     54{{{
     55# OpenVPN server test configuration for Windows Hardware Lab Kit test server
     56#
     57# We need this for HLK "Run tests" which ping6 the gateway of the interface
     58# bound to the driver being tested.
     59#
     60server 10.218.112.0 255.255.255.0
     61server-ipv6 2001:db8:6666::1/64
     62port 1194
     63proto udp
     64dev tun5
     65comp-lzo
     66persist-key
     67persist-tun
     68keepalive 10 120
     69verb 4
     70duplicate-cn
     71max-clients 15
     72status hlk-openvpn-status.log
     73<ca>
     74# CA certicate here
     75</ca>
     76
     77<cert>
     78# Server certificate here
     79</cert>
     80
     81<key>
     82# Server private key here
     83</key>
     84
     85key-direction 0
     86<tls-auth>
     87# TLS Auth key here
     88</tls-auth>
     89}}}
    4790
    4891= Firewall rules for HLK server and clients =