summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Collapse)Author
2021-07-12Change the error reporting pattern throughout the tree when unveilBob Beck
fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion. Work done and verified by Ashton Fagg <ashton@fagg.id.au> ok deraadt@ semarie@ claudio@
2021-07-10Add test case for single static address in configuration payload intobhe
addition to existing "config address" test that uses an address pool.
2021-05-28Fix build and disable dhtest for sntrup761x25519. The test assumes atobhe
symmetric KE and does not work with this method.
2021-04-14Rename privacy to temporary in slaacd regress, then it passes.Alexander Bluhm
OK florian@
2021-03-12INET6_NOPRIVACY is called AUTOCONF6TEMP now, missed during rename.Florian Obser
2021-02-15Fix invalid config error in run-psk-fail.tobhe
2021-02-11More route-to fallout in pfctl regress.Alexander Bluhm
2021-02-07route-to rules take ips, not interfaces with optional ips.David Gwynne
another gentle reminder by bluhm@ who pointed out i missed some
2021-02-07i missed a dup-to when tweaking route-to things to takes ips, not ifaces.David Gwynne
gentle reminded by bluhm@
2021-02-04it's fine to route-to to a table.David Gwynne
i think this should have been tweaked a while back.
2021-02-04route-to rules take ips now, not interfaces with optional ips.David Gwynne
reminded by bluhm@
2021-02-04route-to rules take ips, not interfaces with optional ips.David Gwynne
reminded by bluhm@
2021-02-04route-to rules take an ip now, not an interface with optional ip.David Gwynne
they now also only work on keep state rules, so there's even more errors from the parser to expect. reminded by bluhm@
2021-02-04'struct group' is now called 'struct dh_group'.tobhe
2020-12-30py3-scapy is now scapykn
OK bluhm sthen
2020-12-27Link disklabel and newfs regress to build.Alexander Bluhm
2020-12-25Missed a python2 in previous commit.Alexander Bluhm
2020-12-25Switch to scapy with python 3.Alexander Bluhm
2020-12-17Reformating the test logging affected the expected output.Alexander Bluhm
2020-12-17Remove echo headlines.Alexander Bluhm
2020-11-26Fix config_add_transform and config_free_proposal.tobhe
2020-11-21Fix ikev2_nat_detection().tobhe
2020-11-18Constify sa in ikev2_pld_eap(). The parser code must not change anytobhe
sa or policy state, this should help make it clearer. ok patrick@
2020-11-10Pass correct vars to FROM and TO.tobhe
2020-11-09Add test for dynamic IP assignment via "config address" and "request address".tobhe
Use the "dynamic" keyword to see generate flows from/to dynamic address.
2020-11-08Add seperate FROM/TO variables.tobhe
2020-11-05Make sure IPsec flows are loaded with srcid/dstid attributes.tobhe
2020-11-05Add test for ASN1_DN ids with existing certs.tobhe
2020-11-03Fix dh test after recent API refactoring. Remove outdated references totobhe
EC2N while we're at it.
2020-10-16Display of P2P links has changeddenis
Reported by patrick@
2020-10-06Fix "rtable N" checkkn
pfctl parse.y r.1702 enforced rtables to exist at ruleset creation time but rtable 7 does not exist (this regress only tests the parser), so use 0. Spotted by tb.
2020-09-21Fix test_parser crash in ikev2_pld_eap. msg->msg_parent is always set intobhe
iked, so it should also be set in the test. ok patrick@
2020-09-21With the new rdomain aware slaacd we can't start an additional slaacdFlorian Obser
in rtable 1. However, we can just query the already running one. regress breakage pointed out by tb@
2020-09-20Fix changed eap_parse signature.tobhe
2020-09-15Make sure variable assignments are followed by '\', otherwisetobhe
make(1) ignores them.
2020-09-13More tests for policy matching via dstid.tobhe
2020-09-13Test for failure on dstid mismatch.tobhe
2020-09-13Add run-psk-fail test to check for failure on psk mismatch.tobhe
2020-09-13Refactor config setup boilerplate to allow asymmetric test setups.tobhe
Return _ret from TEST_FLOWS to allow known-negative tests.
2020-09-10Refactor initial cleanup.tobhe
2020-09-07Add 'run-ping-fail' subtest. Make sure to clean up left over statetobhe
before running tests.
2020-08-30Allow multiple global options.tobhe
2020-08-29Add 'enforcesingleikesa' test.tobhe
2020-07-21Add pf config to block unencrypted pings.tobhe
2020-07-21Make test work with IPv6 addresses.tobhe
2020-07-03Rename IN6_IFF_PRIVACY to IN6_IFF_TEMPORARY.Florian Obser
This is the name the other BSDs use for this, there is no reason to be different, the IPv6 RFCs call these addresses temporary, and some software in ports wants to use this as well. Most recently pointed out for firefox by landry. OK claudio, sthen
2020-05-18Make ffs2 the default for newfs; change all calls to create e.g. floppyOtto Moerbeek
filesystems or ramdisks to use explicit -O 1; installer already does that. ok sthen@
2020-04-09The -6 option is ignored and will be removed in the future.tobhe
2020-04-01Properly handle multiple CERTREQ payloads in CA process. Only for thetobhe
last CERTREQ a mismatch should trigger the fallback case, otherwise the following CERTREQs are ignored. ok markus@
2020-02-21Add test for IPsec transport mode. Check not only flows but also SAs,tobhe
SA modes (tunnel/transport), and flow types (IPcomp/ESP).