Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-11-26 | Add 3 regression tests for "route change" dealing with -ifp, -ifa and | Martin Pieuchot | |
-mtu. Triggered by a report from Florian Riehm on tech@. Note that two of these tests are using IPv6 addresses and expose another bug with ::1. I'll deal with this afterward unless someone else(tm) fixes it. | |||
2014-11-18 | Nuke some obvious #include duplications. | Kenneth R Westerback | |
ok espie@ deraadt@ millert@ tedu@ | |||
2014-11-13 | keep queues around when anchors are being loaded | Martin Pelikan | |
ok mikeb | |||
2014-10-29 | Update test outputs to reflect the fact that routes to loopback addresses | Martin Pieuchot | |
are plain local routes. | |||
2014-10-28 | add a regression test for the pfctl parser bug recently fixed by | Sebastian Benoit | |
mikeb@ in pfctl/parse.y rev 1.641. with feedback from mikeb sthen and henning | |||
2014-08-27 | Add support for Curve25519 using the public domain code that is found | Reyk Floeter | |
in OpenSSH. The "private use" DH group 1034 is based on the value that was picked by strongswan recently. OK mikeb@ markus@ | |||
2014-08-25 | Inspired by the previous brainpool addition, copy isakmpd's dh test to | Reyk Floeter | |
iked. Both daemons share the same dh implementation, but this makes it easier to test iked directly. | |||
2014-08-23 | when you specify queues in a rule, make sure they have been defined. | Martin Pelikan | |
DIOCADDRULE EBUSY turns into an error message that pfctl -n catches. DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported to occur, possibly from hfsc.c: this should be fixed as well. ok henning mikeb sthen | |||
2014-07-03 | Enter the REGRESS_FULL target subdirs for clean, cleandir and obj targets. | Miod Vallat | |
2014-06-25 | Explicitely specify address family when translation pool may contain | Mike Belopuhov | |
addresses of different address families. | |||
2014-06-24 | Fixup the test after new queue code has been added. | Mike Belopuhov | |
You can't load a ruleset with undefined queues into the anchor. Change the test to use "set prio" since the whole purpose of it is to test the flexibility of the pf.conf language, not a particular queue feature. | |||
2014-05-31 | Add a basic test for RTM_CHANGE | Claudio Jeker | |
2014-05-14 | Adjust route outputs to the new lo(4) MTU which is now the same on all archs. | Claudio Jeker | |
Makes this regress work again. | |||
2014-04-18 | Introduce some regress tests against our routing table. At least that way | Claudio Jeker | |
there is a chance that we do not break the network stack even more. These regress tests already found a few issues. The framework is ugly and does not properly recover from failures. Somebody more skilled can come up with a better solution. mpi@, blambert@ and sthen@ support this | |||
2014-04-18 | missed these | Henning Brauer | |
2014-04-18 | stop testing altq stuffz | Henning Brauer | |
how many tests I wrote back then... (of which the majority is pointless) | |||
2013-10-12 | adopt existing altq regress to queueing changes; queuespecs for altq use | Henning Brauer | |
"oldqueue" as keyword for the transition phase | |||
2013-08-25 | transform names cannot have commas | Mike Belopuhov | |
2013-08-25 | transform names cannot have commas | Mike Belopuhov | |
2013-08-02 | fixup set prio fallout | Mike Belopuhov | |
2013-08-02 | extra skip step and counters printout fixed by the recent pfctl change | Mike Belopuhov | |
2013-08-02 | fixup set prio fallout | Mike Belopuhov | |
2013-08-02 | update pfail32.ok: it's failiing in a much better way now; ok henning | Mike Belopuhov | |
2013-08-01 | Some tests are currently failing. Only run those if the REGRESS_FULL | Mark Kettenis | |
variable is set. | |||
2013-08-01 | more set queue fallout fixups | Mike Belopuhov | |
2013-07-31 | fixup pfctl regress fallout from the "set tos" and "set queue" changes | Mike Belopuhov | |
2012-10-20 | pf.conf "prio" syntax was changed (2012/07/09); adapt pfctl regress tests. | Stuart Henderson | |
ok henning@ prio X -> set prio X prio (X Y) -> set prio (X Y) | |||
2012-10-19 | scrub(set-tos XX) is deprecated, the preferred form (and thus display | Stuart Henderson | |
output) is set(tos XX). sync regression tests accordingly. henning@ ok. | |||
2012-09-17 | sync with transform-name-fix | Markus Friedl | |
2012-09-15 | sync with recent ipsecctl changes/fixes | Markus Friedl | |
2012-07-10 | Rename "life" to "lifetime" to match iked. | Lawrence Teo | |
ok mikeb naddy sthen; procedures ok henning | |||
2012-07-08 | AES-CTR, AES-GCM, AES-GMAC are disallowed with manual SAs | Christian Weisgerber | |
2011-12-12 | update regression tests wrt skip steps (fixed in pfctl.c rev1.305); | Mike Belopuhov | |
ok henning mcbride (a while back) | |||
2011-12-12 | fixup regression tests wrt skip steps (fixed in pfctl.c rev1.305); | Mike Belopuhov | |
ok henning mcbride (a while back) | |||
2011-11-27 | adjust for port numbers instead of names by default | Henning Brauer | |
From: Lawrence Teo <lteo at devio at us> | |||
2011-07-27 | oops, missing file for weighted round-robin test. | Ryan Thomas McBride | |
2011-07-27 | Update regress tests for weighted round-robin (and recent pool bugfix) | Ryan Thomas McBride | |
2011-07-24 | Handle 'show' specially to prepare for regress tests on pfrke_route | Ryan Thomas McBride | |
and pfrke_cost entries. Output becomes sorted in table order. | |||
2011-07-24 | Update PF table regress tests to work with -current. | Ryan Thomas McBride | |
2011-07-13 | Must now specify correct protocol (tcp, udp) for user and group attributes. | Ryan Thomas McBride | |
2011-07-08 | Add regress tests for 'prio' keyword. | Ryan Thomas McBride | |
2011-07-08 | 'prio' will be a reserved keyword soon. | Ryan Thomas McBride | |
2011-07-08 | Update regress tests for the following changes: | Ryan Thomas McBride | |
- if_addr RB_TREE (Address sort differently on an interface) - skip steps changes - RDOMAIN - reordering of address/port tests - fastroute is gone - keep state is no longer printed by default - lo0 now has link-local scope address in addition to ::1 | |||
2011-07-07 | Regress test cleanup step 1 of n: require-order no longer exists. | Ryan Thomas McBride | |
2011-07-06 | update regress for non-crypto flow 'type use' case | Theo de Raadt | |
2011-04-18 | Deprecate vnds in favour of svnds. | Thordur I. Bjornsson | |
In effect, this removes the "old" vndX nodes, and renames the svndX nodes to vndX. Old svndX nodes will still continue to work though, for now. Cleanup accordingly. ok deraadt@, todd@ comments and ok on the man page bits from jmc@ | |||
2010-10-15 | libdes -> libcrypto | Jonathan Gray | |
2010-10-06 | Retire Skipjack | Mike Belopuhov | |
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts. | |||
2010-07-03 | add several new tests for pfctl, and fix the output of some existing | Peter Hessler | |
tests for the updated pfctl. OK henning@, mcbride@ | |||
2010-07-01 | if we cannot copy the setup file (because objdir doesn't exist), then | Peter Hessler | |
continue anyways. |