wireguard-openbsd/regress/sys/netinet/ipsec, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/regress/sys/netinet/ipsec?h=jd%2Fqueueboosts 2020-01-15T20:47:13Z Do not create files as dependency of .BEGIN rule. Noticed by 2020-01-15T20:47:13Z bluhm bluhm@openbsd.org 2020-01-15T20:47:13Z urn:sha1:fa6bead29153cce3fedfb8dfa9ffdf03a11843dd deraadt@ with make obj in regress. Rework when tests have to be skipped due to insufficient configuration 2020-01-08T21:28:00Z bluhm bluhm@openbsd.org 2020-01-08T21:28:00Z urn:sha1:20b3c4634eb32fa45aefeaca259d1e0c9012c421 of the regress machine. The IPsec policy check for IPComp bundles has been fixed in the 2019-12-20T22:30:16Z bluhm bluhm@openbsd.org 2019-12-20T22:30:16Z urn:sha1:b89c1b7a288c59cfcd9da24a224b2fd95c4659a2 kernel. So we can make the test config stricter. Change the type of ipcomp bundle flows from use to dontacq. Always try to build packet reflector on remote machine. It may be 2018-09-28T18:57:37Z bluhm bluhm@openbsd.org 2018-09-28T18:57:37Z urn:sha1:2271795444996bd3900f2ef028b37a3ae5378784 missing after reinstall. Make sure that the inetd echo and nonxt protocol reflectors are 2018-05-28T20:59:28Z bluhm bluhm@openbsd.org 2018-05-28T20:59:28Z urn:sha1:93c1fcf1c6c01c0ba131f0a0f5310e5fb64203a1 running on the remote machines. Activate IPv6 no next header protocol over IPsec test. Run the 2018-05-21T01:19:21Z bluhm bluhm@openbsd.org 2018-05-21T01:19:21Z urn:sha1:36ecdf3e564c2b9dc4d702df413523cc96ff6755 protocol 59 reflector as daemon on the remote machine like an echo service. It is configured during setup creation and started by an rc.d script. Install inetd.conf files and start the daemon on remote machines 2018-05-19T16:27:07Z bluhm bluhm@openbsd.org 2018-05-19T16:27:07Z urn:sha1:b2e4b92ae7073245c00be6091a902ece5903597d during make create-setup. This makes it easier to configure all machines correctly for the test run. suggested by mpi@ Additionally send no next header protocol 59 packets through the 2018-05-19T10:50:57Z bluhm bluhm@openbsd.org 2018-05-19T10:50:57Z urn:sha1:ecef606853b080cc7c8470cc8793cf6c081ce676 IPsec test. They consist solely of an IPv6 header chain and trigger edge cases. Deactivate for now until the raw IP reflector can be build and started reliably on remote machine. Typo fix, ok bluhm@ 2018-05-15T14:10:16Z mpi mpi@openbsd.org 2018-05-15T14:10:16Z urn:sha1:f4145c75e5da81426a5c6717e2c337d988771b1f Disable counting TCP packets in the test as it does not work reliably. 2018-04-12T00:05:17Z bluhm bluhm@openbsd.org 2018-04-12T00:05:17Z urn:sha1:d04656185bbb1161eea7843bc6937c54f5f002ac The sequence of packets and combination of flags depends on timing.