Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-12 | Change the error reporting pattern throughout the tree when unveil | Bob Beck | |
fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion. Work done and verified by Ashton Fagg <ashton@fagg.id.au> ok deraadt@ semarie@ claudio@ | |||
2021-07-10 | Add test case for single static address in configuration payload in | tobhe | |
addition to existing "config address" test that uses an address pool. | |||
2021-05-28 | Fix build and disable dhtest for sntrup761x25519. The test assumes a | tobhe | |
symmetric KE and does not work with this method. | |||
2021-04-14 | Rename privacy to temporary in slaacd regress, then it passes. | Alexander Bluhm | |
OK florian@ | |||
2021-03-12 | INET6_NOPRIVACY is called AUTOCONF6TEMP now, missed during rename. | Florian Obser | |
2021-02-15 | Fix invalid config error in run-psk-fail. | tobhe | |
2021-02-11 | More route-to fallout in pfctl regress. | Alexander Bluhm | |
2021-02-07 | route-to rules take ips, not interfaces with optional ips. | David Gwynne | |
another gentle reminder by bluhm@ who pointed out i missed some | |||
2021-02-07 | i missed a dup-to when tweaking route-to things to takes ips, not ifaces. | David Gwynne | |
gentle reminded by bluhm@ | |||
2021-02-04 | it's fine to route-to to a table. | David Gwynne | |
i think this should have been tweaked a while back. | |||
2021-02-04 | route-to rules take ips now, not interfaces with optional ips. | David Gwynne | |
reminded by bluhm@ | |||
2021-02-04 | route-to rules take ips, not interfaces with optional ips. | David Gwynne | |
reminded by bluhm@ | |||
2021-02-04 | route-to rules take an ip now, not an interface with optional ip. | David Gwynne | |
they now also only work on keep state rules, so there's even more errors from the parser to expect. reminded by bluhm@ | |||
2021-02-04 | 'struct group' is now called 'struct dh_group'. | tobhe | |
2020-12-30 | py3-scapy is now scapy | kn | |
OK bluhm sthen | |||
2020-12-27 | Link disklabel and newfs regress to build. | Alexander Bluhm | |
2020-12-25 | Missed a python2 in previous commit. | Alexander Bluhm | |
2020-12-25 | Switch to scapy with python 3. | Alexander Bluhm | |
2020-12-17 | Reformating the test logging affected the expected output. | Alexander Bluhm | |
2020-12-17 | Remove echo headlines. | Alexander Bluhm | |
2020-11-26 | Fix config_add_transform and config_free_proposal. | tobhe | |
2020-11-21 | Fix ikev2_nat_detection(). | tobhe | |
2020-11-18 | Constify sa in ikev2_pld_eap(). The parser code must not change any | tobhe | |
sa or policy state, this should help make it clearer. ok patrick@ | |||
2020-11-10 | Pass correct vars to FROM and TO. | tobhe | |
2020-11-09 | Add test for dynamic IP assignment via "config address" and "request address". | tobhe | |
Use the "dynamic" keyword to see generate flows from/to dynamic address. | |||
2020-11-08 | Add seperate FROM/TO variables. | tobhe | |
2020-11-05 | Make sure IPsec flows are loaded with srcid/dstid attributes. | tobhe | |
2020-11-05 | Add test for ASN1_DN ids with existing certs. | tobhe | |
2020-11-03 | Fix dh test after recent API refactoring. Remove outdated references to | tobhe | |
EC2N while we're at it. | |||
2020-10-16 | Display of P2P links has changed | denis | |
Reported by patrick@ | |||
2020-10-06 | Fix "rtable N" check | kn | |
pfctl parse.y r.1702 enforced rtables to exist at ruleset creation time but rtable 7 does not exist (this regress only tests the parser), so use 0. Spotted by tb. | |||
2020-09-21 | Fix test_parser crash in ikev2_pld_eap. msg->msg_parent is always set in | tobhe | |
iked, so it should also be set in the test. ok patrick@ | |||
2020-09-21 | With the new rdomain aware slaacd we can't start an additional slaacd | Florian Obser | |
in rtable 1. However, we can just query the already running one. regress breakage pointed out by tb@ | |||
2020-09-20 | Fix changed eap_parse signature. | tobhe | |
2020-09-15 | Make sure variable assignments are followed by '\', otherwise | tobhe | |
make(1) ignores them. | |||
2020-09-13 | More tests for policy matching via dstid. | tobhe | |
2020-09-13 | Test for failure on dstid mismatch. | tobhe | |
2020-09-13 | Add run-psk-fail test to check for failure on psk mismatch. | tobhe | |
2020-09-13 | Refactor config setup boilerplate to allow asymmetric test setups. | tobhe | |
Return _ret from TEST_FLOWS to allow known-negative tests. | |||
2020-09-10 | Refactor initial cleanup. | tobhe | |
2020-09-07 | Add 'run-ping-fail' subtest. Make sure to clean up left over state | tobhe | |
before running tests. | |||
2020-08-30 | Allow multiple global options. | tobhe | |
2020-08-29 | Add 'enforcesingleikesa' test. | tobhe | |
2020-07-21 | Add pf config to block unencrypted pings. | tobhe | |
2020-07-21 | Make test work with IPv6 addresses. | tobhe | |
2020-07-03 | Rename IN6_IFF_PRIVACY to IN6_IFF_TEMPORARY. | Florian Obser | |
This is the name the other BSDs use for this, there is no reason to be different, the IPv6 RFCs call these addresses temporary, and some software in ports wants to use this as well. Most recently pointed out for firefox by landry. OK claudio, sthen | |||
2020-05-18 | Make ffs2 the default for newfs; change all calls to create e.g. floppy | Otto Moerbeek | |
filesystems or ramdisks to use explicit -O 1; installer already does that. ok sthen@ | |||
2020-04-09 | The -6 option is ignored and will be removed in the future. | tobhe | |
2020-04-01 | Properly handle multiple CERTREQ payloads in CA process. Only for the | tobhe | |
last CERTREQ a mismatch should trigger the fallback case, otherwise the following CERTREQs are ignored. ok markus@ | |||
2020-02-21 | Add test for IPsec transport mode. Check not only flows but also SAs, | tobhe | |
SA modes (tunnel/transport), and flow types (IPcomp/ESP). |