summaryrefslogtreecommitdiffstats
path: root/regress/sbin/ipsecctl
AgeCommit message (Expand)AuthorFilesLines
2017-04-19SA group has been renamed to bundle. Adapt test.bluhm3-12/+12
2017-04-14Add tests with the ipsec.conf SA bundle keyword.bluhm5-10/+44
2017-03-23Add tests for SA grouped in bundles.bluhm5-2/+60
2017-03-23Allow to override location of ipsecctl tool with IPSECCTL environment.bluhm1-10/+11
2016-09-02Adjust for the new default MODP groupmikeb60-1440/+1440
2016-09-02Remove obsolete DES-CBC testsmikeb12-64/+0
2013-08-25transform names cannot have commasmikeb1-56/+56
2013-08-25transform names cannot have commasmikeb1-7/+7
2012-09-17sync with transform-name-fixmarkus61-1401/+1401
2012-09-15sync with recent ipsecctl changes/fixesmarkus63-222/+1845
2012-07-10Rename "life" to "lifetime" to match iked.lteo6-6/+6
2012-07-08AES-CTR, AES-GCM, AES-GMAC are disallowed with manual SAsnaddy18-66/+50
2011-07-06update regress for non-crypto flow 'type use' casederaadt2-2/+2
2010-10-06Retire Skipjackmikeb12-64/+0
2010-05-10Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' ->krw1-2/+2
2009-08-04Add regress tests with IPv4 and IPv6 addresses for the srcid and/or dstid.jsing13-1/+158
2009-01-30If the "peer" address is not specified or derived from "to" forbluhm3-2/+122
2009-01-29Remove ikefail10 ipsecctl regression test as it always fails. Itbluhm3-12/+2
2009-01-28Allow to specify ike and flow explicitly without peer. The anybluhm5-3/+68
2009-01-20Regression tests for source flow NAT support.mpf5-3/+241
2009-01-19Do not use "egress" keyword as it expands to an actual interface,hshoexer2-87/+33
2008-12-22add regression test for aes-{128,192,256} being used with main and quickhshoexer3-2/+113
2008-12-22Adopt to recent change: /32 now is treated as a network address.hshoexer1-4/+6
2008-07-01Isakmpd acquire mode did not work with a config generated frombluhm93-1716/+1716
2008-07-01If multiple to addresses but no peer are given in an ike or flowbluhm15-24/+44
2008-01-04Add a regression test for handling addresses with trailing '/32' and addresshshoexer3-2/+21
2007-10-15Add new "reached end of file while parsing quoted string" as expectedhshoexer2-0/+2
2007-07-03both 'proto 50' and 'proto esp' must work in flow specificationsmarkus2-0/+6
2007-05-10Do not crash when lists include the "any" keyword. Reported byhshoexer3-2/+60
2007-03-16move autodetection of the ID type to the parser. this way themarkus3-2/+83
2007-03-14We switched to aes cbc quite some time ago, so also use the correcthshoexer12-20/+20
2007-02-19add a test for null encryptionhshoexer2-0/+8
2007-02-19we have to use '-k' now to show keys.hshoexer1-3/+3
2007-02-19previous commit to parse.y was undone. adopt these two regression tests.hshoexer2-2/+2
2007-02-16Adopt to recent change in parse.y (do not accept '\n' in quotedhshoexer3-3/+3
2007-01-10allow rule if there is at least _one_ matching address family combination.markus3-2/+8
2007-01-04don't pass -1 as a netmask; report vicviq at gmail.commarkus3-2/+21
2006-11-30wrong rid for protocolmarkus5-5/+5
2006-11-30sync: rmv to unregister ipsec connectionsmarkus40-0/+65
2006-11-30sync: proto/port in lid/rid/connectionmarkus9-87/+87
2006-11-24fix typo for remote port; from Brian Candlermarkus1-1/+1
2006-11-21syncmarkus40-349/+0
2006-11-16add comment on how to update the *.ok files; ok hshoexer@markus1-1/+2
2006-11-13Update to match improved address family check.mcbride6-7/+7
2006-11-01Adjust existing ikedel tests for aggressive mode support (we nowmcbride39-0/+63
2006-10-31Remove bogus input line.hshoexer2-3/+1
2006-10-31Add some regression tests for odd ipsecctl behaviour noticed byhshoexer11-2/+52
2006-08-29Test for an as yet unresolved problem:naddy3-2/+6
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.naddy9-3/+78
2006-07-21tests similar to ike49 and ike50, but with ipv6 addresses.hshoexer5-2/+44
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.