summaryrefslogtreecommitdiff
path: root/regress/sbin/ipsecctl
AgeCommit message (Collapse)Author
2007-10-15Add new "reached end of file while parsing quoted string" as expectedHans-Joerg Hoexer
error message.
2007-07-03both 'proto 50' and 'proto esp' must work in flow specificationsMarkus Friedl
2007-05-10Do not crash when lists include the "any" keyword. Reported byHans-Joerg Hoexer
<ralf.horstmann at gmx.net>, thanks! Slightly different fix. Also add a regression test. ok mpf@
2007-03-16move autodetection of the ID type to the parser. this way theMarkus Friedl
static flows have the correct ID, too. ok hshoexer, reyk
2007-03-14We switched to aes cbc quite some time ago, so also use the correctHans-Joerg Hoexer
key sizes here, too. We now have to use 128 bit key instead of 160. Noticed by david@
2007-02-19add a test for null encryptionHans-Joerg Hoexer
2007-02-19we have to use '-k' now to show keys.Hans-Joerg Hoexer
2007-02-19previous commit to parse.y was undone. adopt these two regression tests.Hans-Joerg Hoexer
2007-02-16Adopt to recent change in parse.y (do not accept '\n' in quotedHans-Joerg Hoexer
strings). The syntax error is now reported at the correct line.
2007-01-10allow rule if there is at least _one_ matching address family combination.Markus Friedl
this allows 'flow from lo0 to 127.0.0.1' if lo0 has an ipv6 address. ok itojun@, hshoexer@
2007-01-04don't pass -1 as a netmask; report vicviq at gmail.comMarkus Friedl
2006-11-30wrong rid for protocolMarkus Friedl
2006-11-30sync: rmv to unregister ipsec connectionsMarkus Friedl
2006-11-30sync: proto/port in lid/rid/connectionMarkus Friedl
2006-11-24fix typo for remote port; from Brian CandlerMarkus Friedl
2006-11-21syncMarkus Friedl
2006-11-16add comment on how to update the *.ok files; ok hshoexer@Markus Friedl
2006-11-13Update to match improved address family check.Ryan Thomas McBride
2006-11-01Adjust existing ikedel tests for aggressive mode support (we nowRyan Thomas McBride
delete both mainmode and aggressive mode phase 1 transforms)
2006-10-31Remove bogus input line.Hans-Joerg Hoexer
2006-10-31Add some regression tests for odd ipsecctl behaviour noticed byHans-Joerg Hoexer
Prabhu Gurumurt. Test ikefail10 should fail, but does not and needs to be fixed.
2006-08-29Test for an as yet unresolved problem:Christian Weisgerber
If list expansion produces peer pairings between different address families, this should be an error. Suggested by and ok hshoexer@
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.Christian Weisgerber
ok hshoexer@
2006-07-21tests similar to ike49 and ike50, but with ipv6 addresses.Hans-Joerg Hoexer
2006-07-21yet another test.Hans-Joerg Hoexer
2006-07-21new tests for default peer usageHans-Joerg Hoexer
2006-07-21update and enable that testHans-Joerg Hoexer
2006-06-20The ike/ikedel tests 48 to 50 do net exist yet. They will be neededHans-Joerg Hoexer
for stuff that will soon be commited. In the meanwhile disable them. Noticed by david@, thanks!
2006-06-18adopt to recent changesHans-Joerg Hoexer
2006-06-16and fix the corresponding regression test.Hans-Joerg Hoexer
2006-06-16adopt to recent changesHans-Joerg Hoexer
2006-06-15Add a bunch of test for deletion of ike rules, add a test for "toHans-Joerg Hoexer
any" rules without a peer specified. These tests resulted in the recent fix in ipsecctl/ike.c.
2006-06-15add safail2Hans-Joerg Hoexer
2006-06-15test invalid v6/v4 address combinations for SAs.Hans-Joerg Hoexer
2006-06-13we use aes for manual keying as default now. adopt these tests.Hans-Joerg Hoexer
2006-06-10adopted to recent change.Hans-Joerg Hoexer
2006-06-08really, this is the correct *.ok output, what was generated in the past wasTodd T. Fries
due to recently fixed code move some ike?? to ikefail?
2006-06-08Add a transport mode specifier to ike rules. Tunnel mode remains the default.Christian Weisgerber
"looks right" hshoexer@
2006-06-08Add tests for a tiny regression I've just foundHans-Joerg Hoexer
2006-06-02check port modifiers in ike rulesChristian Weisgerber
2006-06-02add trailing \Markus Friedl
2006-06-02enable all ike tests, even though some of them are currently broken.Hans-Joerg Hoexer
2006-06-02new test for setting lifetimesHans-Joerg Hoexer
2006-06-02check port modifiers in flow rules; ok hshoexer@Christian Weisgerber
2006-06-02fix this test, too.Hans-Joerg Hoexer
2006-06-02fix this tests. Enable a bunch of new sa testsHans-Joerg Hoexer
2006-06-01modify local-ID sections for disabled regress tests tooMathieu Sauve-Frankel
ok hshoexer@
2006-06-01change the ike regression tests to use the new local-ID formatMathieu Sauve-Frankel
ok hshoexer@
2006-06-01some more, not hooked up yetHans-Joerg Hoexer
2006-06-01prepare some more tests for v6Hans-Joerg Hoexer