Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-03-16 | move autodetection of the ID type to the parser. this way the | Markus Friedl | |
static flows have the correct ID, too. ok hshoexer, reyk | |||
2007-03-15 | When commiting multiple files with ci, the flags from the previous | Alexander Bluhm | |
files affected the later ones. ok niallo@ xsa@ | |||
2007-03-14 | We switched to aes cbc quite some time ago, so also use the correct | Hans-Joerg Hoexer | |
key sizes here, too. We now have to use 128 bit key instead of 160. Noticed by david@ | |||
2007-02-22 | Fix regression tests. False positives happened whenever the date/time | Ray Lai | |
contained 1.3, 1.4, or 1.5. ``hahahahahaha'' joris@. | |||
2007-02-19 | add a test for null encryption | Hans-Joerg Hoexer | |
2007-02-19 | we have to use '-k' now to show keys. | Hans-Joerg Hoexer | |
2007-02-19 | previous commit to parse.y was undone. adopt these two regression tests. | Hans-Joerg Hoexer | |
2007-02-16 | Adopt to recent change in parse.y (do not accept '\n' in quoted | Hans-Joerg Hoexer | |
strings). The syntax error is now reported at the correct line. | |||
2007-02-13 | - Be explicit on command line checking, instead of relying on patterns, | Matthias Kilian | |
which may be NULL (e.g. -e ''). - let add_pattern() decide how to deal with empty patterns, don't do magic in read_patterns(). This unbreaks stuff like grep -e '', and makes grep -f <file> more POSIX compliant. Semantics for grep -f /dev/null (or any other empty file) may be questionable, but this case isn't specified by POSIX, and matching nothing at all seems to be sane. Thanks to otto@, who mentioned potential problems related to the -x option with the first patch i sent. ok jaredy@ (some time ago), otto@, millert@ | |||
2007-01-28 | New test for exceptions. | Mark Kettenis | |
2007-01-28 | Move test in its own directory. | Mark Kettenis | |
2007-01-10 | allow rule if there is at least _one_ matching address family combination. | Markus Friedl | |
this allows 'flow from lo0 to 127.0.0.1' if lo0 has an ipv6 address. ok itojun@, hshoexer@ | |||
2007-01-08 | advertising clauses that can be dropped | Theo de Raadt | |
2007-01-04 | don't pass -1 as a netmask; report vicviq at gmail.com | Markus Friedl | |
2006-12-15 | Sync arch list | Miod Vallat | |
2006-12-13 | Additional test for multiple PermitOpen entries. ok djm@ | Darren Tucker | |
2006-11-30 | wrong rid for protocol | Markus Friedl | |
2006-11-30 | sync: rmv to unregister ipsec connections | Markus Friedl | |
2006-11-30 | sync: proto/port in lid/rid/connection | Markus Friedl | |
2006-11-28 | very basic regress test for rtable select code | Henning Brauer | |
2006-11-24 | fix typo for remote port; from Brian Candler | Markus Friedl | |
2006-11-21 | sync | Markus Friedl | |
2006-11-16 | add comment on how to update the *.ok files; ok hshoexer@ | Markus Friedl | |
2006-11-13 | Update to match improved address family check. | Ryan Thomas McBride | |
2006-11-07 | Use anchor recursion when printing loaded ruleset (make certain that recursion | Ryan Thomas McBride | |
works and catch some other potential anchor weirdnesses). Non recursive printing still tested in pfopt6. | |||
2006-11-07 | Add test for -a with nested anchors. | Ryan Thomas McBride | |
2006-11-07 | Add regress tests for inline anchors. | Ryan Thomas McBride | |
2006-11-06 | fix quoting for non-(c)sh login shells. | Markus Friedl | |
2006-11-01 | Adjust existing ikedel tests for aggressive mode support (we now | Ryan Thomas McBride | |
delete both mainmode and aggressive mode phase 1 transforms) | |||
2006-10-31 | Remove bogus input line. | Hans-Joerg Hoexer | |
2006-10-31 | Add some regression tests for odd ipsecctl behaviour noticed by | Hans-Joerg Hoexer | |
Prabhu Gurumurt. Test ikefail10 should fail, but does not and needs to be fixed. | |||
2006-10-28 | Expected regress changes due to separation of parsing and kernel loading. | Ryan Thomas McBride | |
2006-10-25 | test logging to alternate pflog interfaces | Henning Brauer | |
2006-10-25 | tag names may be longer now, and someone didn't update regress tests | Henning Brauer | |
accordingly | |||
2006-10-23 | regression test for getpeereid. okay claudio | Marc Espie | |
2006-10-17 | 'flags S/SA' not implicit if the rule is stateless. | Ryan Thomas McBride | |
2006-10-13 | add blocked_shutdown | Kurt Miller | |
2006-10-13 | Test shutdown() racing with other threads using the same file | Kurt Miller | |
descriptor, with some of them blocking on data that will never arrive. | |||
2006-10-06 | Handle default 'flags S/SA keep state', 'no state' and 'flags any'. | Ryan Thomas McBride | |
2006-10-06 | eliminate warnings on 64bit archs | Kurt Miller | |
2006-10-03 | correct check for proper return value of dup2 | Kurt Miller | |
2006-09-29 | add strtod() underflow test | Otto Moerbeek | |
2006-09-22 | add blocked_close, blocked_dup2, close_race and dup2_race | Kurt Miller | |
2006-09-22 | Test dup2() racing with other threads using the same file | Kurt Miller | |
descriptor. | |||
2006-09-22 | Test close() racing with other threads using the same file | Kurt Miller | |
descriptor. | |||
2006-09-22 | Test dup2() racing with other threads using the same file | Kurt Miller | |
descriptor, with some of them blocking on data that will never arrive. | |||
2006-09-22 | Test close() racing with other threads using the same file | Kurt Miller | |
descriptor, with some of them blocking on data that will never arrive. | |||
2006-09-19 | - bump ulimit -d value for EOF test case so that it works on amd64 and ↵ | Niall O'Higgins | |
sparc64 (thanks to pedro@ for testing on his sparc64). - use ${.CURDIR} to make this work properly with an obj/ dir. | |||
2006-09-17 | fix badly named regress, and add suffixes rules. | Marc Espie | |
2006-08-29 | Test for an as yet unresolved problem: | Christian Weisgerber | |
If list expansion produces peer pairings between different address families, this should be an error. Suggested by and ok hshoexer@ |