summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Collapse)Author
2014-11-26Add 3 regression tests for "route change" dealing with -ifp, -ifa andMartin Pieuchot
-mtu. Triggered by a report from Florian Riehm on tech@. Note that two of these tests are using IPv6 addresses and expose another bug with ::1. I'll deal with this afterward unless someone else(tm) fixes it.
2014-11-18Nuke some obvious #include duplications.Kenneth R Westerback
ok espie@ deraadt@ millert@ tedu@
2014-11-13keep queues around when anchors are being loadedMartin Pelikan
ok mikeb
2014-10-29Update test outputs to reflect the fact that routes to loopback addressesMartin Pieuchot
are plain local routes.
2014-10-28add a regression test for the pfctl parser bug recently fixed bySebastian Benoit
mikeb@ in pfctl/parse.y rev 1.641. with feedback from mikeb sthen and henning
2014-08-27Add support for Curve25519 using the public domain code that is foundReyk Floeter
in OpenSSH. The "private use" DH group 1034 is based on the value that was picked by strongswan recently. OK mikeb@ markus@
2014-08-25Inspired by the previous brainpool addition, copy isakmpd's dh test toReyk Floeter
iked. Both daemons share the same dh implementation, but this makes it easier to test iked directly.
2014-08-23when you specify queues in a rule, make sure they have been defined.Martin Pelikan
DIOCADDRULE EBUSY turns into an error message that pfctl -n catches. DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported to occur, possibly from hfsc.c: this should be fixed as well. ok henning mikeb sthen
2014-07-03Enter the REGRESS_FULL target subdirs for clean, cleandir and obj targets.Miod Vallat
2014-06-25Explicitely specify address family when translation pool may containMike Belopuhov
addresses of different address families.
2014-06-24Fixup the test after new queue code has been added.Mike Belopuhov
You can't load a ruleset with undefined queues into the anchor. Change the test to use "set prio" since the whole purpose of it is to test the flexibility of the pf.conf language, not a particular queue feature.
2014-05-31Add a basic test for RTM_CHANGEClaudio Jeker
2014-05-14Adjust route outputs to the new lo(4) MTU which is now the same on all archs.Claudio Jeker
Makes this regress work again.
2014-04-18Introduce some regress tests against our routing table. At least that wayClaudio Jeker
there is a chance that we do not break the network stack even more. These regress tests already found a few issues. The framework is ugly and does not properly recover from failures. Somebody more skilled can come up with a better solution. mpi@, blambert@ and sthen@ support this
2014-04-18missed theseHenning Brauer
2014-04-18stop testing altq stuffzHenning Brauer
how many tests I wrote back then... (of which the majority is pointless)
2013-10-12adopt existing altq regress to queueing changes; queuespecs for altq useHenning Brauer
"oldqueue" as keyword for the transition phase
2013-08-25transform names cannot have commasMike Belopuhov
2013-08-25transform names cannot have commasMike Belopuhov
2013-08-02fixup set prio falloutMike Belopuhov
2013-08-02extra skip step and counters printout fixed by the recent pfctl changeMike Belopuhov
2013-08-02fixup set prio falloutMike Belopuhov
2013-08-02update pfail32.ok: it's failiing in a much better way now; ok henningMike Belopuhov
2013-08-01Some tests are currently failing. Only run those if the REGRESS_FULLMark Kettenis
variable is set.
2013-08-01more set queue fallout fixupsMike Belopuhov
2013-07-31fixup pfctl regress fallout from the "set tos" and "set queue" changesMike Belopuhov
2012-10-20pf.conf "prio" syntax was changed (2012/07/09); adapt pfctl regress tests.Stuart Henderson
ok henning@ prio X -> set prio X prio (X Y) -> set prio (X Y)
2012-10-19scrub(set-tos XX) is deprecated, the preferred form (and thus displayStuart Henderson
output) is set(tos XX). sync regression tests accordingly. henning@ ok.
2012-09-17sync with transform-name-fixMarkus Friedl
2012-09-15sync with recent ipsecctl changes/fixesMarkus Friedl
2012-07-10Rename "life" to "lifetime" to match iked.Lawrence Teo
ok mikeb naddy sthen; procedures ok henning
2012-07-08AES-CTR, AES-GCM, AES-GMAC are disallowed with manual SAsChristian Weisgerber
2011-12-12update regression tests wrt skip steps (fixed in pfctl.c rev1.305);Mike Belopuhov
ok henning mcbride (a while back)
2011-12-12fixup regression tests wrt skip steps (fixed in pfctl.c rev1.305);Mike Belopuhov
ok henning mcbride (a while back)
2011-11-27adjust for port numbers instead of names by defaultHenning Brauer
From: Lawrence Teo <lteo at devio at us>
2011-07-27oops, missing file for weighted round-robin test.Ryan Thomas McBride
2011-07-27Update regress tests for weighted round-robin (and recent pool bugfix)Ryan Thomas McBride
2011-07-24Handle 'show' specially to prepare for regress tests on pfrke_routeRyan Thomas McBride
and pfrke_cost entries. Output becomes sorted in table order.
2011-07-24Update PF table regress tests to work with -current.Ryan Thomas McBride
2011-07-13Must now specify correct protocol (tcp, udp) for user and group attributes.Ryan Thomas McBride
2011-07-08Add regress tests for 'prio' keyword.Ryan Thomas McBride
2011-07-08'prio' will be a reserved keyword soon.Ryan Thomas McBride
2011-07-08Update regress tests for the following changes:Ryan Thomas McBride
- if_addr RB_TREE (Address sort differently on an interface) - skip steps changes - RDOMAIN - reordering of address/port tests - fastroute is gone - keep state is no longer printed by default - lo0 now has link-local scope address in addition to ::1
2011-07-07Regress test cleanup step 1 of n: require-order no longer exists.Ryan Thomas McBride
2011-07-06update regress for non-crypto flow 'type use' caseTheo de Raadt
2011-04-18Deprecate vnds in favour of svnds.Thordur I. Bjornsson
In effect, this removes the "old" vndX nodes, and renames the svndX nodes to vndX. Old svndX nodes will still continue to work though, for now. Cleanup accordingly. ok deraadt@, todd@ comments and ok on the man page bits from jmc@
2010-10-15libdes -> libcryptoJonathan Gray
2010-10-06Retire SkipjackMike Belopuhov
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts.
2010-07-03add several new tests for pfctl, and fix the output of some existingPeter Hessler
tests for the updated pfctl. OK henning@, mcbride@
2010-07-01if we cannot copy the setup file (because objdir doesn't exist), thenPeter Hessler
continue anyways.