summaryrefslogtreecommitdiffstats
path: root/regress/sbin (follow)
Commit message (Collapse)AuthorAgeFilesLines
* INET6_NOPRIVACY is called AUTOCONF6TEMP now, missed during rename.florian2021-03-121-2/+2
|
* Fix invalid config error in run-psk-fail.tobhe2021-02-151-3/+13
|
* More route-to fallout in pfctl regress.bluhm2021-02-111-5/+5
|
* route-to rules take ips, not interfaces with optional ips.dlg2021-02-071-13/+13
| | | | another gentle reminder by bluhm@ who pointed out i missed some
* i missed a dup-to when tweaking route-to things to takes ips, not ifaces.dlg2021-02-071-1/+1
| | | | gentle reminded by bluhm@
* it's fine to route-to to a table.dlg2021-02-041-3/+0
| | | | i think this should have been tweaked a while back.
* route-to rules take ips now, not interfaces with optional ips.dlg2021-02-043-19/+19
| | | | reminded by bluhm@
* route-to rules take ips, not interfaces with optional ips.dlg2021-02-043-38/+38
| | | | reminded by bluhm@
* route-to rules take an ip now, not an interface with optional ip.dlg2021-02-042-2/+4
| | | | | | | they now also only work on keep state rules, so there's even more errors from the parser to expect. reminded by bluhm@
* 'struct group' is now called 'struct dh_group'.tobhe2021-02-042-4/+4
|
* py3-scapy is now scapykn2020-12-301-3/+3
| | | | OK bluhm sthen
* Link disklabel and newfs regress to build.bluhm2020-12-271-2/+2
|
* Missed a python2 in previous commit.bluhm2020-12-251-2/+2
|
* Switch to scapy with python 3.bluhm2020-12-255-27/+32
|
* Reformating the test logging affected the expected output.bluhm2020-12-1724-48/+48
|
* Remove echo headlines.bluhm2020-12-174-92/+6
|
* Fix config_add_transform and config_free_proposal.tobhe2020-11-261-5/+11
|
* Fix ikev2_nat_detection().tobhe2020-11-211-3/+3
|
* Constify sa in ikev2_pld_eap(). The parser code must not change anytobhe2020-11-181-6/+6
| | | | | | sa or policy state, this should help make it clearer. ok patrick@
* Pass correct vars to FROM and TO.tobhe2020-11-101-3/+3
|
* Add test for dynamic IP assignment via "config address" and "request address".tobhe2020-11-092-4/+36
| | | | Use the "dynamic" keyword to see generate flows from/to dynamic address.
* Add seperate FROM/TO variables.tobhe2020-11-082-2/+4
|
* Make sure IPsec flows are loaded with srcid/dstid attributes.tobhe2020-11-051-3/+7
|
* Add test for ASN1_DN ids with existing certs.tobhe2020-11-051-2/+12
|
* Fix dh test after recent API refactoring. Remove outdated references totobhe2020-11-032-16/+27
| | | | EC2N while we're at it.
* Display of P2P links has changeddenis2020-10-161-6/+6
| | | | Reported by patrick@
* Fix "rtable N" checkkn2020-10-062-2/+2
| | | | | | | pfctl parse.y r.1702 enforced rtables to exist at ruleset creation time but rtable 7 does not exist (this regress only tests the parser), so use 0. Spotted by tb.
* Fix test_parser crash in ikev2_pld_eap. msg->msg_parent is always set intobhe2020-09-211-1/+2
| | | | | | iked, so it should also be set in the test. ok patrick@
* With the new rdomain aware slaacd we can't start an additional slaacdflorian2020-09-211-6/+2
| | | | | in rtable 1. However, we can just query the already running one. regress breakage pointed out by tb@
* Fix changed eap_parse signature.tobhe2020-09-201-3/+5
|
* Make sure variable assignments are followed by '\', otherwisetobhe2020-09-151-4/+4
| | | | make(1) ignores them.
* More tests for policy matching via dstid.tobhe2020-09-131-12/+63
|
* Test for failure on dstid mismatch.tobhe2020-09-131-1/+15
|
* Add run-psk-fail test to check for failure on psk mismatch.tobhe2020-09-131-1/+17
|
* Refactor config setup boilerplate to allow asymmetric test setups.tobhe2020-09-132-46/+52
| | | | Return _ret from TEST_FLOWS to allow known-negative tests.
* Refactor initial cleanup.tobhe2020-09-101-2/+4
|
* Add 'run-ping-fail' subtest. Make sure to clean up left over statetobhe2020-09-071-15/+33
| | | | before running tests.
* Allow multiple global options.tobhe2020-08-302-10/+8
|
* Add 'enforcesingleikesa' test.tobhe2020-08-291-5/+31
|
* Add pf config to block unencrypted pings.tobhe2020-07-212-4/+18
|
* Make test work with IPv6 addresses.tobhe2020-07-211-2/+3
|
* Rename IN6_IFF_PRIVACY to IN6_IFF_TEMPORARY.florian2020-07-031-2/+2
| | | | | | | | This is the name the other BSDs use for this, there is no reason to be different, the IPv6 RFCs call these addresses temporary, and some software in ports wants to use this as well. Most recently pointed out for firefox by landry. OK claudio, sthen
* Make ffs2 the default for newfs; change all calls to create e.g. floppyotto2020-05-181-2/+2
| | | | | filesystems or ramdisks to use explicit -O 1; installer already does that. ok sthen@
* The -6 option is ignored and will be removed in the future.tobhe2020-04-091-3/+3
|
* Properly handle multiple CERTREQ payloads in CA process. Only for thetobhe2020-04-011-5/+5
| | | | | | | last CERTREQ a mismatch should trigger the fallback case, otherwise the following CERTREQs are ignored. ok markus@
* Add test for IPsec transport mode. Check not only flows but also SAs,tobhe2020-02-212-8/+34
| | | | SA modes (tunnel/transport), and flow types (IPcomp/ESP).
* Disable name resolution in tcpdump with -n. We always compare source andtobhe2020-02-171-3/+3
| | | | destination addresses.
* Generate public keys for newly generated local private keys.tobhe2020-02-171-2/+4
|
* Reset udpencap_port sysctl in cleanup in case the run-udpencap-porttobhe2020-01-171-3/+5
| | | | test fails.
* Add test for custom udp encapsulation port with set with '-p'.tobhe2020-01-161-6/+23
|
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.