summaryrefslogtreecommitdiff
path: root/regress/sbin/ipsecctl
diff options
context:
space:
mode:
authorHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2006-06-02 06:10:09 +0000
committerHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2006-06-02 06:10:09 +0000
commit7e6c1cfa7bdf36f7a49a7a57a20facbf5be6ad9b (patch)
treea23e38a109fde42a4dd27d5d6768d32a77577fac /regress/sbin/ipsecctl
parent5f914c0eb1f34f923c5251126ed6a7d2c8663c0d (diff)
new test for setting lifetimes
Diffstat (limited to 'regress/sbin/ipsecctl')
-rw-r--r--regress/sbin/ipsecctl/Makefile5
-rw-r--r--regress/sbin/ipsecctl/ike41.in1
-rw-r--r--regress/sbin/ipsecctl/ike41.ok20
3 files changed, 24 insertions, 2 deletions
diff --git a/regress/sbin/ipsecctl/Makefile b/regress/sbin/ipsecctl/Makefile
index 22c9ad6a5c1..f1c17ff8df4 100644
--- a/regress/sbin/ipsecctl/Makefile
+++ b/regress/sbin/ipsecctl/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.26 2006/06/02 04:12:52 naddy Exp $
+# $OpenBSD: Makefile,v 1.27 2006/06/02 06:10:08 hshoexer Exp $
# TARGETS
# ipsec: feed ipsecNN.in through ipsecctl and check wether the output matches
@@ -15,9 +15,10 @@ SATESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
SAFAIL=1
IPSECFAIL=1 2
IKEFAIL=1
-IKETESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
+IKETESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
#IKETESTS+=16 17 18 19 20 21 22 23 24
#IKETESTS+=25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
+IKETESTS+=41
SHELL=/bin/sh
diff --git a/regress/sbin/ipsecctl/ike41.in b/regress/sbin/ipsecctl/ike41.in
new file mode 100644
index 00000000000..ae225eb5ef8
--- /dev/null
+++ b/regress/sbin/ipsecctl/ike41.in
@@ -0,0 +1 @@
+ike from 1.1.1.1 to 2.2.2.2 main life 3600 quick life 1200
diff --git a/regress/sbin/ipsecctl/ike41.ok b/regress/sbin/ipsecctl/ike41.ok
new file mode 100644
index 00000000000..6da54ba009c
--- /dev/null
+++ b/regress/sbin/ipsecctl/ike41.ok
@@ -0,0 +1,20 @@
+C set [General]:Default-phase-1-lifetime=3600 force
+C set [General]:Default-phase-2-lifetime=1200 force
+C set [Phase 1]:2.2.2.2=peer-2.2.2.2 force
+C set [peer-2.2.2.2]:Phase=1 force
+C set [peer-2.2.2.2]:Address=2.2.2.2 force
+C set [peer-2.2.2.2]:Configuration=mm-2.2.2.2 force
+C set [mm-2.2.2.2]:EXCHANGE_TYPE=ID_PROT force
+C add [mm-2.2.2.2]:Transforms=AES-SHA-GRP15-RSA_SIG force
+C set [IPsec-1.1.1.1-2.2.2.2]:Phase=2 force
+C set [IPsec-1.1.1.1-2.2.2.2]:ISAKMP-peer=peer-2.2.2.2 force
+C set [IPsec-1.1.1.1-2.2.2.2]:Configuration=qm-1.1.1.1-2.2.2.2 force
+C set [IPsec-1.1.1.1-2.2.2.2]:Local-ID=lid-1.1.1.1 force
+C set [IPsec-1.1.1.1-2.2.2.2]:Remote-ID=rid-2.2.2.2 force
+C set [qm-1.1.1.1-2.2.2.2]:EXCHANGE_TYPE=QUICK_MODE force
+C set [qm-1.1.1.1-2.2.2.2]:Suites=QM-ESP-AES-SHA2-256-PFS-GRP15-SUITE force
+C set [lid-1.1.1.1]:ID-type=IPV4_ADDR force
+C set [lid-1.1.1.1]:Address=1.1.1.1 force
+C set [rid-2.2.2.2]:ID-type=IPV4_ADDR force
+C set [rid-2.2.2.2]:Address=2.2.2.2 force
+C add [Phase 2]:Connections=IPsec-1.1.1.1-2.2.2.2