summaryrefslogtreecommitdiff
path: root/regress
AgeCommit message (Collapse)Author
2014-07-14Add sendsyslog too, and sortPhilip Guenther
2014-07-14Update systrace policies for arc4random changesPhilip Guenther
2014-07-14Hook in libressl to regress.Joel Sing
2014-07-14Sort SUBDIRs.Joel Sing
2014-07-14Now that the relayd timeouts have been fixed, make the http timeoutAlexander Bluhm
test more strict again. Backout rev 1.2 of args-timeout-http.pl.
2014-07-14Update regress test to work with ressl API changes.Joel Sing
2014-07-13fix regress tests after log changes. noticed by bluhm@.Sebastian Benoit
everybody stand back. i know regular expressions.
2014-07-13Add a regress test for the ASN1 handling of SSL session tickets.Joel Sing
2014-07-13Make the pf_fragment test pass again. pf does not adjust theAlexander Bluhm
checksum of a NATed UDP or TCP packet in the payload of an ICMP packet anymore. Disable all test that rely on this feature. Check that the router's interface mtu has been set to 1300.
2014-07-13Make the pf_forward test pass again. Check that the router'sAlexander Bluhm
interface mtu has been set to 1300. New netcat needs -N for shutdown. The IPv4 and IPv6 addresses for the af-to tests must have corresponding host numbers.
2014-07-13improve log output for relays. adjust regress testsSebastian Benoit
ok reyk
2014-07-13repair matching of headers, add regress test for this errorSebastian Benoit
ok reyk
2014-07-12Automatically load the required pf rules into the kernel of theAlexander Bluhm
remote test machine.
2014-07-12Teach these pf regress tests to run with obj directory and to failAlexander Bluhm
softly if the setup is incomplete. Link them to the build.
2014-07-12Use a saner and consistent address layout for my network tests thatAlexander Bluhm
run over 4 machines. Add a check-setup target to verify that interface addresses and routes are properly set up.
2014-07-12More KNF.Joel Sing
2014-07-12Remove #ifndefs for OPENSSL_NO_DH, OPENSSL_NO_ECDH andJoel Sing
OPENSSL_NO_X509_VERIFY. We're not going to build with these and the same removal has already been done for libssl.
2014-07-12Add an initial regress test for libressl, which calls ressl from Go andJoel Sing
makes it talk to a Go TLS server.
2014-07-12fix relay "append header" action, add regression test for appendSebastian Benoit
ok reyk
2014-07-12Test filtering by methodReyk Floeter
ok bluhm@ benno@
2014-07-11Put a license file into the test directories with multiple argumentAlexander Bluhm
files. We do not want to put a license header into each subtest. suggested by reyk@
2014-07-11Add OpenBSD RCS id.Alexander Bluhm
2014-07-11Limit HTTP header length to about 8K (based on the default of 4-8K inReyk Floeter
common web servers). Add a related regress test. OK benno@
2014-07-11Add a test framework for the ospfd routing daemon. For each testAlexander Bluhm
one fresh daemon is started with an individual config. It is talking OSPF via a tun interface. At the process side of the tun device a client is running. This test programm is parsing the OSPF packets and generates new ones. It simulates other OSPF daemons. For now only hello packets are tested. Each test has a task list which drives the ospfd through its interface state machine. The plan is to extend the framework for the other OSPF packet types and state machines. Eventualy the generated kernel routing messages could also be checked. I have developed this test suite together with Florian Riehm.
2014-07-11Another regress test for OpenSSL PR #3397 (Joyent 7704), from agl via OpenSSLMiod Vallat
RT.
2014-07-11Make the test output easier to read by splitting the test casesAlexander Bluhm
with an empty line and a header line.
2014-07-11Regression test for PKCS5_PBKDF2_HMAC(), written by Christian Heimes ; fromMiod Vallat
OpenSSL trunk
2014-07-11Verify the checksum of the echo reply fragment based on the echoAlexander Bluhm
request.
2014-07-11Add a test that sends a large ICMP6 packet in many small fragments.Alexander Bluhm
The echo reply has to be fragmented.
2013-01-03Reengineer the socket splicing regression tests:Alexander Bluhm
- Move the tests from splice to new sosplice directory for consistent naming. - Split the API tests and the TCP splicing tests into separate directories. - Create some tests for the upcoming UDP splicing. - Tests can be run in obj directories now. - The API tests can run both on a local and on a remote machine now. - Fix the forking TCP tests which splice and read or write simultaneously. - Bunch of little fixes for races in the tests. - Deduplicate code, move checks into common functions.
2014-07-11Fix dryrun for remote relayd test.Alexander Bluhm
2014-07-11Add a time.log file that accumulates timing information about theAlexander Bluhm
executed tests. This allows to micro benchmark relayd. based on a diff from andre@; OK reyk@
2014-07-11Simplify the code that handles the HTTP headers by using an RB treeReyk Floeter
with associated lists instead of the complicated lookup table and "others" list. This might add a little malloc overhead for common headers but also fixes some issues like the handling of repeated headers - for example, handling of multiple "Set-Cookie" headers. ok bluhm@ (regress part) ok benno@
2014-07-11Remove PSK from the ssl regress.Joel Sing
2014-07-11replace u_int32_t with uint32_tbcook
ok beck@
2014-07-11Fix dumb copy/paste mistake.Matthew Dempsky
Noticed testing with clang.
2014-07-11Fix explicit_bzero regress for Solaris and OS X compatibilityMatthew Dempsky
Solaris and OS X clobber the signal stack when returning to the main stack, which caused the original testing strategy (inspecting the signal stack once we're back on the main stack) to fail. To be compatible with this behavior, the regress test now inspects the signal stack space while we're still executing on it. This is a bit iffy because we might clobber it ourselves while inspecting it, but we as long as its not completely clobbered we should be okay. thx bcook for the Solaris test account
2014-07-10Test relayd error message for a broken config file.Alexander Bluhm
2014-07-10Check for the exact number of done requests in relayd log.Alexander Bluhm
2014-07-10Print "%s (removed)" into relayd log and test for that string.Alexander Bluhm
suggested by reyk@
2014-07-10To make sure that at least anything is tested, add a length checkAlexander Bluhm
per default for the default length value in check_logs(). If a test doesn't want this check, it has to disable it explicitly with nocheck. Also remove unneeded nocheck switches for deeper testing.
2014-07-10Uncompress ssltest.Joel Sing
2014-07-10Add support to test handling of repeated headers.Reyk Floeter
From RFC 7230, section 3.2.2: "A sender MUST NOT generate multiple header fields with the same field name in a message unless either the entire field value for that header field is defined as a comma-separated list [i.e., #(values)] or the header field is a well-known exception (as noted below)."
2014-07-10Implement non-persistent connections in a cleaner way. Every testAlexander Bluhm
that offers multiple requets per HTTP connection is run twice. First all requests are run over a single TCP connection. Then for each requests a separate TCP connection is established. If a requests during a persistent connection fails, a reconnect is done as relayd cancels the whole connection. This allows stricter tests for filters. OK reyk@
2014-07-09Add some extra sanity checks to make sure the test functions actuallyMatthew Dempsky
run on altstack.
2014-07-09add some (currently failing) tests for openssl-like version number (1.0.1g) ↵Jasper Lievisse Adriaanse
comparisons
2014-07-09Changes in relayd's regression tests have to be discussed.Reyk Floeter
As discussed with bluhm@ deraadt@
2014-07-09Minor cleanupsMatthew Dempsky
Rename _waitpid() to safewaitpid() to avoid POSIX reserved identifier namespace. KNF nit: return value expressions should be surrounded by parentheses, per style(9). Ensure SIGCHLD is set to SIG_DFL, not SIG_IGN. POSIX allows (and requires under XSI) that terminated child processes not leave zombies if SIGCHLD is set to SIG_IGN, and it also allows execve() to leave SIGCHLD set to SIG_IGN.
2014-07-09Better workaround for OS X sigaltstack() bugMatthew Dempsky
OS X's sigaltstack() fails with ENOMEM if ss_size < MINSIGSTKSZ even if SS_DISABLE is specified in ss_flags. Rather than add code to try to cope with this stupidity, just don't bother restoring the original signal stack.
2014-07-09Update and extend the regress tests to use the new grammar of theReyk Floeter
filtering rules. Some of the filenames are based on the old grammar, we keep them for now and just update the contents to have a before/after comparison of the features. Most of the work was done by Andre de Oliveira (andre@) OK bluhm@ benno@