DeforaNetworks/fwknop
DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity

[test suite] Added Rijndael+HMAC NAT rand port via client rc file test

Browse Source
This commit is contained in:
Michael Rash 2014-03-12 23:59:01 -04:00
parent 83595bdabb
commit 4181b43f55
5 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@ -7,6 +7,7 @@ fwknop-2.6.1 (//2014):
specific language in this header was created by the Debian legal team at
the request of Franck Joncourt.
- [test suite] Added Rijndael+HMAC command execution test.
- [test suite] Added Rijndael+HMAC NAT rand port via client rc file test.
fwknop-2.6.0 (01/12/2014):
- (Radostan Riedel) Added an AppArmor policy for fwknopd that is known to

1
Makefile.am
View File

@ -195,6 +195,7 @@ EXTRA_DIST = \
test/conf/hmac_no_b64_cygwin_access.conf \
test/conf/multi_pkts.pcap \
test/conf/fwknoprc_default_hmac_base64_key \
test/conf/fwknoprc_hmac_nat_rand_base64_key \
test/conf/fwknoprc_hmac_key2 \
test/conf/fwknoprc_gpg_hmac_key \
test/conf/fwknoprc_hmac_equal_keys \

5
test/conf/fwknoprc_hmac_nat_rand_base64_key Normal file
View File

@ -0,0 +1,5 @@
[default]
HMAC_DIGEST_TYPE sha256
KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg=
HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg==
NAT_RAND_PORT Y

1
test/test-fwknop.pl
View File

@ -135,6 +135,7 @@ our %cf = (
'rc_hmac_equal_keys' => "$conf_dir/fwknoprc_hmac_equal_keys",
'rc_invalid_b64_key' => "$conf_dir/fwknoprc_invalid_base64_key",
'rc_hmac_b64_key' => "$conf_dir/fwknoprc_default_hmac_base64_key",
'rc_hmac_nat_rand_b64_key' => "$conf_dir/fwknoprc_hmac_nat_rand_base64_key",
'rc_hmac_sha512_b64_key' => "$conf_dir/fwknoprc_hmac_sha512_base64_key",
'rc_hmac_b64_key2' => "$conf_dir/fwknoprc_hmac_key2",
'rc_rand_port_hmac_b64_key' => "$conf_dir/fwknoprc_rand_port_hmac_base64_key",

17
test/tests/rijndael_hmac.pl
View File

@ -1097,6 +1097,23 @@
'fw_rule_removed' => $NEW_RULE_REMOVED,
'server_conf' => $cf{'nat'},
},
{
'category' => 'Rijndael+HMAC',
'subcategory' => 'client+server',
'detail' => "rc NAT rand port to tcp/22",
'function' => \&spa_cycle,
'cmdline' => "$fwknopCmd -A tcp/22 -a $fake_ip -D $loopback_ip --rc-file " .
"$cf{'rc_hmac_nat_rand_b64_key'} $verbose_str -N $internal_nat_host",
'fwknopd_cmdline' => "$fwknopdCmd -c $cf{'nat'} -a $cf{'hmac_access'} " .
"-d $default_digest_file -p $default_pid_file $intf_str",
'server_positive_output_matches' => [
qr/FWKNOP_FORWARD.*dport\s22\s.*\sACCEPT/,
qr/FWKNOP_PREROUTING.*\sDNAT\s.*to\-destination\s$internal_nat_host\:22/,
],
'fw_rule_created' => $NEW_RULE_REQUIRED,
'fw_rule_removed' => $NEW_RULE_REMOVED,
'server_conf' => $cf{'nat'},
},
{
'category' => 'Rijndael+HMAC',
'subcategory' => 'client+server',