tests similar to ike49 and ike50, but with ipv6 addresses.

5 files changed, 44 insertions, 2 deletions

diff --git a/regress/sbin/ipsecctl/Makefile b/regress/sbin/ipsecctl/Makefile
index f5da6a72328..ecdbce94f6e 100644
--- a/regress/sbin/ipsecctl/Makefile
+++ b/regress/sbin/ipsecctl/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.39 2006/07/21 12:45:19 hshoexer Exp $
+# $OpenBSD: Makefile,v 1.40 2006/07/21 12:50:55 hshoexer Exp $
 
 # TARGETS
 # ipsec: feed ipsecNN.in through ipsecctl and check wether the output matches
@@ -18,7 +18,7 @@ IKEFAIL=1 3 4 5
 IKETESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
 IKETESTS+=16 17 18 19 20 21 22 23
 IKETESTS+=29 30 31 32 33 34 35 36 37 38 39 40
-IKETESTS+=41 42 43 46 47 48 49 50
+IKETESTS+=41 42 43 46 47 48 49 50 51 52
 
 IKEDELTESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
 IKEDELTESTS+=16 17 18 19 20 21 22 23
diff --git a/regress/sbin/ipsecctl/ike51.in b/regress/sbin/ipsecctl/ike51.in
new file mode 100644
index 00000000000..cdf8f2e6944
--- /dev/null
+++ b/regress/sbin/ipsecctl/ike51.in
@@ -0,0 +1 @@
+ike from 3ffe::1/24 to 3ffe:2::/24 psk mekmitasdigoat
diff --git a/regress/sbin/ipsecctl/ike51.ok b/regress/sbin/ipsecctl/ike51.ok
new file mode 100644
index 00000000000..63ed7853e29
--- /dev/null
+++ b/regress/sbin/ipsecctl/ike51.ok
@@ -0,0 +1,20 @@
+C set [Phase 1]:Default=peer-default force
+C set [peer-default]:Phase=1 force
+C set [peer-default]:Authentication=mekmitasdigoat force
+C set [peer-default]:Configuration=mm-default force
+C set [mm-default]:EXCHANGE_TYPE=ID_PROT force
+C add [mm-default]:Transforms=AES-SHA force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Phase=2 force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:ISAKMP-peer=peer-default force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Configuration=qm-3ffe::1/24-3ffe:2::/24 force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Local-ID=lid-3ffe::1/24 force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Remote-ID=rid-3ffe:2::/24 force
+C set [qm-3ffe::1/24-3ffe:2::/24]:EXCHANGE_TYPE=QUICK_MODE force
+C set [qm-3ffe::1/24-3ffe:2::/24]:Suites=QM-ESP-AES-SHA2-256-PFS-SUITE force
+C set [lid-3ffe::1/24]:ID-type=IPV6_ADDR_SUBNET force
+C set [lid-3ffe::1/24]:Network=3ffe::1 force
+C set [lid-3ffe::1/24]:Netmask=ffff:ff00:: force
+C set [rid-3ffe:2::/24]:ID-type=IPV6_ADDR_SUBNET force
+C set [rid-3ffe:2::/24]:Network=3ffe:2:: force
+C set [rid-3ffe:2::/24]:Netmask=ffff:ff00:: force
+C add [Phase 2]:Connections=IPsec-3ffe::1/24-3ffe:2::/24
diff --git a/regress/sbin/ipsecctl/ike52.in b/regress/sbin/ipsecctl/ike52.in
new file mode 100644
index 00000000000..a0dc38a7916
--- /dev/null
+++ b/regress/sbin/ipsecctl/ike52.in
@@ -0,0 +1 @@
+ike from 3ffe::1/24 to 3ffe:2::/24 local 3ffe::3
diff --git a/regress/sbin/ipsecctl/ike52.ok b/regress/sbin/ipsecctl/ike52.ok
new file mode 100644
index 00000000000..91dab9d5009
--- /dev/null
+++ b/regress/sbin/ipsecctl/ike52.ok
@@ -0,0 +1,20 @@
+C set [Phase 1]:Default=peer-default force
+C set [peer-default]:Phase=1 force
+C set [peer-default]:Local-address=3ffe::3 force
+C set [peer-default]:Configuration=mm-default force
+C set [mm-default]:EXCHANGE_TYPE=ID_PROT force
+C add [mm-default]:Transforms=AES-SHA-RSA_SIG force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Phase=2 force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:ISAKMP-peer=peer-default force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Configuration=qm-3ffe::1/24-3ffe:2::/24 force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Local-ID=lid-3ffe::1/24 force
+C set [IPsec-3ffe::1/24-3ffe:2::/24]:Remote-ID=rid-3ffe:2::/24 force
+C set [qm-3ffe::1/24-3ffe:2::/24]:EXCHANGE_TYPE=QUICK_MODE force
+C set [qm-3ffe::1/24-3ffe:2::/24]:Suites=QM-ESP-AES-SHA2-256-PFS-SUITE force
+C set [lid-3ffe::1/24]:ID-type=IPV6_ADDR_SUBNET force
+C set [lid-3ffe::1/24]:Network=3ffe::1 force
+C set [lid-3ffe::1/24]:Netmask=ffff:ff00:: force
+C set [rid-3ffe:2::/24]:ID-type=IPV6_ADDR_SUBNET force
+C set [rid-3ffe:2::/24]:Network=3ffe:2:: force
+C set [rid-3ffe:2::/24]:Netmask=ffff:ff00:: force
+C add [Phase 2]:Connections=IPsec-3ffe::1/24-3ffe:2::/24