summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Collapse)Author
2007-02-19add a test for null encryptionHans-Joerg Hoexer
2007-02-19we have to use '-k' now to show keys.Hans-Joerg Hoexer
2007-02-19previous commit to parse.y was undone. adopt these two regression tests.Hans-Joerg Hoexer
2007-02-16Adopt to recent change in parse.y (do not accept '\n' in quotedHans-Joerg Hoexer
strings). The syntax error is now reported at the correct line.
2007-01-10allow rule if there is at least _one_ matching address family combination.Markus Friedl
this allows 'flow from lo0 to 127.0.0.1' if lo0 has an ipv6 address. ok itojun@, hshoexer@
2007-01-04don't pass -1 as a netmask; report vicviq at gmail.comMarkus Friedl
2006-11-30wrong rid for protocolMarkus Friedl
2006-11-30sync: rmv to unregister ipsec connectionsMarkus Friedl
2006-11-30sync: proto/port in lid/rid/connectionMarkus Friedl
2006-11-28very basic regress test for rtable select codeHenning Brauer
2006-11-24fix typo for remote port; from Brian CandlerMarkus Friedl
2006-11-21syncMarkus Friedl
2006-11-16add comment on how to update the *.ok files; ok hshoexer@Markus Friedl
2006-11-13Update to match improved address family check.Ryan Thomas McBride
2006-11-07Use anchor recursion when printing loaded ruleset (make certain that recursionRyan Thomas McBride
works and catch some other potential anchor weirdnesses). Non recursive printing still tested in pfopt6.
2006-11-07Add test for -a with nested anchors.Ryan Thomas McBride
2006-11-07Add regress tests for inline anchors.Ryan Thomas McBride
2006-11-01Adjust existing ikedel tests for aggressive mode support (we nowRyan Thomas McBride
delete both mainmode and aggressive mode phase 1 transforms)
2006-10-31Remove bogus input line.Hans-Joerg Hoexer
2006-10-31Add some regression tests for odd ipsecctl behaviour noticed byHans-Joerg Hoexer
Prabhu Gurumurt. Test ikefail10 should fail, but does not and needs to be fixed.
2006-10-28Expected regress changes due to separation of parsing and kernel loading.Ryan Thomas McBride
2006-10-25test logging to alternate pflog interfacesHenning Brauer
2006-10-25tag names may be longer now, and someone didn't update regress testsHenning Brauer
accordingly
2006-10-17'flags S/SA' not implicit if the rule is stateless.Ryan Thomas McBride
2006-10-06Handle default 'flags S/SA keep state', 'no state' and 'flags any'.Ryan Thomas McBride
2006-08-29Test for an as yet unresolved problem:Christian Weisgerber
If list expansion produces peer pairings between different address families, this should be an error. Suggested by and ok hshoexer@
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.Christian Weisgerber
ok hshoexer@
2006-07-21tests similar to ike49 and ike50, but with ipv6 addresses.Hans-Joerg Hoexer
2006-07-21yet another test.Hans-Joerg Hoexer
2006-07-21new tests for default peer usageHans-Joerg Hoexer
2006-07-21update and enable that testHans-Joerg Hoexer
2006-06-20The ike/ikedel tests 48 to 50 do net exist yet. They will be neededHans-Joerg Hoexer
for stuff that will soon be commited. In the meanwhile disable them. Noticed by david@, thanks!
2006-06-18adopt to recent changesHans-Joerg Hoexer
2006-06-16and fix the corresponding regression test.Hans-Joerg Hoexer
2006-06-16adopt to recent changesHans-Joerg Hoexer
2006-06-15Add a bunch of test for deletion of ike rules, add a test for "toHans-Joerg Hoexer
any" rules without a peer specified. These tests resulted in the recent fix in ipsecctl/ike.c.
2006-06-15add safail2Hans-Joerg Hoexer
2006-06-15test invalid v6/v4 address combinations for SAs.Hans-Joerg Hoexer
2006-06-13we use aes for manual keying as default now. adopt these tests.Hans-Joerg Hoexer
2006-06-10adopted to recent change.Hans-Joerg Hoexer
2006-06-08really, this is the correct *.ok output, what was generated in the past wasTodd T. Fries
due to recently fixed code move some ike?? to ikefail?
2006-06-08Add a transport mode specifier to ike rules. Tunnel mode remains the default.Christian Weisgerber
"looks right" hshoexer@
2006-06-08Add tests for a tiny regression I've just foundHans-Joerg Hoexer
2006-06-02check port modifiers in ike rulesChristian Weisgerber
2006-06-02add trailing \Markus Friedl
2006-06-02enable all ike tests, even though some of them are currently broken.Hans-Joerg Hoexer
2006-06-02new test for setting lifetimesHans-Joerg Hoexer
2006-06-02Fix regress tests for automatic adaptive timeouts.Ryan Thomas McBride
2006-06-02check port modifiers in flow rules; ok hshoexer@Christian Weisgerber
2006-06-02fix this test, too.Hans-Joerg Hoexer