summaryrefslogtreecommitdiffstats
path: root/regress/sbin/iked
AgeCommit message (Expand)AuthorFilesLines
2021-02-15Fix invalid config error in run-psk-fail.tobhe1-3/+13
2021-02-04'struct group' is now called 'struct dh_group'.tobhe2-4/+4
2020-12-17Remove echo headlines.bluhm1-17/+1
2020-11-26Fix config_add_transform and config_free_proposal.tobhe1-5/+11
2020-11-21Fix ikev2_nat_detection().tobhe1-3/+3
2020-11-18Constify sa in ikev2_pld_eap(). The parser code must not change anytobhe1-6/+6
2020-11-10Pass correct vars to FROM and TO.tobhe1-3/+3
2020-11-09Add test for dynamic IP assignment via "config address" and "request address".tobhe2-4/+36
2020-11-08Add seperate FROM/TO variables.tobhe2-2/+4
2020-11-05Make sure IPsec flows are loaded with srcid/dstid attributes.tobhe1-3/+7
2020-11-05Add test for ASN1_DN ids with existing certs.tobhe1-2/+12
2020-11-03Fix dh test after recent API refactoring. Remove outdated references totobhe2-16/+27
2020-09-21Fix test_parser crash in ikev2_pld_eap. msg->msg_parent is always set intobhe1-1/+2
2020-09-20Fix changed eap_parse signature.tobhe1-3/+5
2020-09-15Make sure variable assignments are followed by '\', otherwisetobhe1-4/+4
2020-09-13More tests for policy matching via dstid.tobhe1-12/+63
2020-09-13Test for failure on dstid mismatch.tobhe1-1/+15
2020-09-13Add run-psk-fail test to check for failure on psk mismatch.tobhe1-1/+17
2020-09-13Refactor config setup boilerplate to allow asymmetric test setups.tobhe2-46/+52
2020-09-10Refactor initial cleanup.tobhe1-2/+4
2020-09-07Add 'run-ping-fail' subtest. Make sure to clean up left over statetobhe1-15/+33
2020-08-30Allow multiple global options.tobhe2-10/+8
2020-08-29Add 'enforcesingleikesa' test.tobhe1-5/+31
2020-07-21Add pf config to block unencrypted pings.tobhe2-4/+18
2020-07-21Make test work with IPv6 addresses.tobhe1-2/+3
2020-04-09The -6 option is ignored and will be removed in the future.tobhe1-3/+3
2020-04-01Properly handle multiple CERTREQ payloads in CA process. Only for thetobhe1-5/+5
2020-02-21Add test for IPsec transport mode. Check not only flows but also SAs,tobhe2-8/+34
2020-02-17Disable name resolution in tcpdump with -n. We always compare source andtobhe1-3/+3
2020-02-17Generate public keys for newly generated local private keys.tobhe1-2/+4
2020-01-17Reset udpencap_port sysctl in cleanup in case the run-udpencap-porttobhe1-3/+5
2020-01-16Add test for custom udp encapsulation port with set with '-p'.tobhe1-6/+23
2020-01-16Link iked live test to build. To operate it needs two remotebluhm1-2/+2
2020-01-15Add multiple altname fields and test for different subjectAltName formatstobhe2-5/+24
2020-01-15Restructure certificate generation to utilize make's build deps. Add testtobhe1-38/+94
2020-01-15Rename the environment variables for ssh hosts and addressesbluhm2-32/+32
2020-01-15Add automated certificate generation, psk and certificate authenticationtobhe3-16/+88
2020-01-14Add live test for simple ikev2 handshake and encrypted ping between twotobhe2-0/+124
2019-11-14Fix undefined symbol for ikev2_ike_sa_setreason.tobhe1-1/+6
2019-08-14Add ikev2_ikesa_info dummy definition for parser test.tobhe1-1/+7
2019-05-11Add support for IKEv2 Message Fragmentation as defined in RFC 7383.patrick2-2/+70
2018-03-22The iked(8) fuzzer did not fuzz encrypted payloads. With that changedpatrick1-8/+18
2017-05-30Organize iked parser regress Makefile similar to mandoc dbm_dump.bluhm1-23/+16
2017-05-29*** empty log message ***markus2-2/+21
2017-05-29fuzz the iked payload parser using the openssh unit-test frameworkmarkus8-0/+2072
2014-08-27Add support for Curve25519 using the public domain code that is foundreyk2-9/+9
2014-08-25Inspired by the previous brainpool addition, copy isakmpd's dh test toreyk3-0/+104