Inspired by the previous brainpool addition, copy isakmpd's dh test to

iked.  Both daemons share the same dh implementation, but this makes
it easier to test iked directly.

3 files changed, 104 insertions, 0 deletions

diff --git a/regress/sbin/iked/Makefile b/regress/sbin/iked/Makefile
new file mode 100644
index 00000000000..556e851f028
--- /dev/null
+++ b/regress/sbin/iked/Makefile
@@ -0,0 +1,5 @@
+#	$OpenBSD: Makefile,v 1.1 2014/08/25 19:22:20 reyk Exp $
+
+SUBDIR=	dh
+
+.include <bsd.subdir.mk>
diff --git a/regress/sbin/iked/dh/Makefile b/regress/sbin/iked/dh/Makefile
new file mode 100644
index 00000000000..ca0ed80526b
--- /dev/null
+++ b/regress/sbin/iked/dh/Makefile
@@ -0,0 +1,17 @@
+#	$OpenBSD: Makefile,v 1.1 2014/08/25 19:22:20 reyk Exp $
+
+# Test DH:
+
+PROG=		dhtest
+SRCS=		dh.c dhtest.c
+TOPSRC=		${.CURDIR}/../../../../sbin/iked
+TOPOBJ!=	cd ${TOPSRC}; printf "all:\n\t@pwd\n" |${MAKE} -f-
+.PATH:		${TOPSRC} ${TOPOBJ}
+CFLAGS+=	-I${TOPSRC} -I${TOPOBJ} -Wall
+
+NOMAN=
+LDADD+=		-lcrypto
+DPADD+=		${LIBCRYPTO}
+DEBUG=		-g
+
+.include <bsd.regress.mk>
diff --git a/regress/sbin/iked/dh/dhtest.c b/regress/sbin/iked/dh/dhtest.c
new file mode 100644
index 00000000000..f5100dc096f
--- /dev/null
+++ b/regress/sbin/iked/dh/dhtest.c
@@ -0,0 +1,82 @@
+/*	$OpenBSD: dhtest.c,v 1.1 2014/08/25 19:22:20 reyk Exp $	*/
+/*	$EOM: dhtest.c,v 1.1 1998/07/18 21:14:20 provos Exp $	*/
+
+/*
+ * Copyright (c) 2010 Reyk Floeter <reyk@vantronix.net>
+ * Copyright (c) 1998 Niels Provos.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This code was written under funding by Ericsson Radio Systems.
+ */
+
+/*
+ * This module does a Diffie-Hellman Exchange
+ */
+
+#include <stdlib.h>
+#include <string.h>
+#include <stdio.h>
+
+#include "dh.h"
+
+int
+main(void)
+{
+	int len, id;
+	char buf[DH_MAXSZ], buf2[DH_MAXSZ];
+	char sec[DH_MAXSZ], sec2[DH_MAXSZ];
+	struct group *group, *group2;
+	const char *name[] = { "MODP", "EC2N", "ECP" };
+
+	group_init();
+
+	for (id = 0; id < 0xff; id++) {
+		if ((group = group_get(id)) == NULL ||
+		    (group2 = group_get(id)) == NULL)
+			continue;
+
+		printf ("Testing group %d (%s%d): ", id,
+		    name[group->spec->type],
+		    group->spec->bits);
+
+		len = dh_getlen(group);
+
+		dh_create_exchange(group, buf);
+		dh_create_exchange(group2, buf2);
+
+		dh_create_shared(group, sec, buf2);
+		dh_create_shared(group2, sec2, buf);
+
+		if (memcmp (sec, sec2, len)) {
+			printf("FAILED\n");
+			return (1);
+		} else
+			printf("OKAY\n");
+
+		group_free(group);
+		group_free(group2);
+	}
+
+	return (0);
+}