diff --git a/test/conf/default_fwknopd.conf b/test/conf/default_fwknopd.conf index 485af6a5..e69de29b 100644 --- a/test/conf/default_fwknopd.conf +++ b/test/conf/default_fwknopd.conf @@ -1,4 +0,0 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# diff --git a/test/conf/disable_aging_fwknopd.conf b/test/conf/disable_aging_fwknopd.conf index 195a85be..5c0a1625 100644 --- a/test/conf/disable_aging_fwknopd.conf +++ b/test/conf/disable_aging_fwknopd.conf @@ -1,5 +1 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# ENABLE_SPA_PACKET_AGING N; diff --git a/test/conf/disable_aging_nat_fwknopd.conf b/test/conf/disable_aging_nat_fwknopd.conf index 5d719362..2d93497c 100644 --- a/test/conf/disable_aging_nat_fwknopd.conf +++ b/test/conf/disable_aging_nat_fwknopd.conf @@ -1,6 +1,2 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# ENABLE_SPA_PACKET_AGING N; ENABLE_IPT_FORWARDING Y; diff --git a/test/conf/dual_key_usage_access.conf b/test/conf/dual_key_usage_access.conf index 0cc0d8ec..4354562c 100644 --- a/test/conf/dual_key_usage_access.conf +++ b/test/conf/dual_key_usage_access.conf @@ -2,7 +2,6 @@ SOURCE: ANY; KEY: fwknoptest; OPEN_PORTS: tcp/22; FW_ACCESS_TIMEOUT: 2; - SOURCE: ANY; KEY: fwknoptest; OPEN_PORTS: tcp/80; diff --git a/test/conf/fwknoprc_default_hmac_base64_key b/test/conf/fwknoprc_default_hmac_base64_key index ec23e7f0..5ebade7e 100644 --- a/test/conf/fwknoprc_default_hmac_base64_key +++ b/test/conf/fwknoprc_default_hmac_base64_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha256 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_invalid_type b/test/conf/fwknoprc_hmac_invalid_type index ba24370d..0d826f47 100644 --- a/test/conf/fwknoprc_hmac_invalid_type +++ b/test/conf/fwknoprc_hmac_invalid_type @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE invalid KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_key2 b/test/conf/fwknoprc_hmac_key2 index 555e4199..027f2b8a 100644 --- a/test/conf/fwknoprc_hmac_key2 +++ b/test/conf/fwknoprc_hmac_key2 @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha256 KEY rijndaeltest HMAC_KEY hmactest - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_md5_key b/test/conf/fwknoprc_hmac_md5_key index 307103eb..52d5a8c2 100644 --- a/test/conf/fwknoprc_hmac_md5_key +++ b/test/conf/fwknoprc_hmac_md5_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE md5 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64 sVwJFvtWp7/IkTsKfcRbKQ== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_md5_long_key b/test/conf/fwknoprc_hmac_md5_long_key index 45014f2c..fa6d4b17 100644 --- a/test/conf/fwknoprc_hmac_md5_long_key +++ b/test/conf/fwknoprc_hmac_md5_long_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE md5 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64 d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_md5_short_key b/test/conf/fwknoprc_hmac_md5_short_key index f7c3d05d..7613e740 100644 --- a/test/conf/fwknoprc_hmac_md5_short_key +++ b/test/conf/fwknoprc_hmac_md5_short_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE md5 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: QQBwGf0bkZmBUA== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha1_key b/test/conf/fwknoprc_hmac_sha1_key index 314996f7..435d5c3a 100644 --- a/test/conf/fwknoprc_hmac_sha1_key +++ b/test/conf/fwknoprc_hmac_sha1_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha1 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: QQBwGf0bkZmBUA== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha1_long_key b/test/conf/fwknoprc_hmac_sha1_long_key index 229b261f..bf52c596 100644 --- a/test/conf/fwknoprc_hmac_sha1_long_key +++ b/test/conf/fwknoprc_hmac_sha1_long_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha1 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64 d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha1_short_key b/test/conf/fwknoprc_hmac_sha1_short_key index 314996f7..435d5c3a 100644 --- a/test/conf/fwknoprc_hmac_sha1_short_key +++ b/test/conf/fwknoprc_hmac_sha1_short_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha1 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: QQBwGf0bkZmBUA== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha256_key b/test/conf/fwknoprc_hmac_sha256_key index 7f657a36..64d99858 100644 --- a/test/conf/fwknoprc_hmac_sha256_key +++ b/test/conf/fwknoprc_hmac_sha256_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha256 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha256_long_key b/test/conf/fwknoprc_hmac_sha256_long_key index 7f657a36..64d99858 100644 --- a/test/conf/fwknoprc_hmac_sha256_long_key +++ b/test/conf/fwknoprc_hmac_sha256_long_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha256 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha256_short_key b/test/conf/fwknoprc_hmac_sha256_short_key index 7f657a36..64d99858 100644 --- a/test/conf/fwknoprc_hmac_sha256_short_key +++ b/test/conf/fwknoprc_hmac_sha256_short_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha256 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha384_key b/test/conf/fwknoprc_hmac_sha384_key index 06ed114e..4a5d940a 100644 --- a/test/conf/fwknoprc_hmac_sha384_key +++ b/test/conf/fwknoprc_hmac_sha384_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha384 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: 4BzQKdhUpy3ijTbjQmrrl4sMX0cOFqUz+Yq/ET3dDuzS1OH7omsFzra649fLuTLEGQy8u9Mt7XKscMIvv6MqmARI892r0U57QYtKWlilbzJhLNKhF6+vpBKC+6ArZD/OzFUHB/oREch8I8QR/nCCpxrzjca5BN/KAdAOi3xvX1Q= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha384_long_key b/test/conf/fwknoprc_hmac_sha384_long_key index c68f212f..af1f1879 100644 --- a/test/conf/fwknoprc_hmac_sha384_long_key +++ b/test/conf/fwknoprc_hmac_sha384_long_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha384 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: QrsLAq6NWmPKBiDF4dwfAUDz7XsTz7lgVNFyBsRhDzgBc9HCN6j5s1NaLu7D2gG7AcawOwt3GHtwmbcQqY2I5FkgrCg4rfO4kIj9w835WGka5RgXovbcGTO06MWOcijsB6WS9FRlZNENMLKPM2KjKjtYMxrZrAYjOrLmKYd5EPI= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha384_short_key b/test/conf/fwknoprc_hmac_sha384_short_key index 7da41f01..0820bc05 100644 --- a/test/conf/fwknoprc_hmac_sha384_short_key +++ b/test/conf/fwknoprc_hmac_sha384_short_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha384 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: QQBwGf0bkZmBUA== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha512_key b/test/conf/fwknoprc_hmac_sha512_key index 5abf428a..5eb0dc9a 100644 --- a/test/conf/fwknoprc_hmac_sha512_key +++ b/test/conf/fwknoprc_hmac_sha512_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha512 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: d6F/uWTZmjqYorNkEKWl3TnVUiRNTCFijv3RclV+p8K0T5mU3co9Lz/hlDU/RxwFXLdDQGWEzRTk7O+8G59aVOEHUIME95KdrALQf2z4sLjsrNzOZdjfZVYRpcp1rYRsAdJmeT7K0G5B2WKmI8t6srwPVQJty9CDn6pAqqg6Oek= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha512_long_key b/test/conf/fwknoprc_hmac_sha512_long_key index 0ebec970..8e124fda 100644 --- a/test/conf/fwknoprc_hmac_sha512_long_key +++ b/test/conf/fwknoprc_hmac_sha512_long_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha512 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: QUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQQ== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_sha512_short_key b/test/conf/fwknoprc_hmac_sha512_short_key index f9eee9d9..eeb055d7 100644 --- a/test/conf/fwknoprc_hmac_sha512_short_key +++ b/test/conf/fwknoprc_hmac_sha512_short_key @@ -1,73 +1,4 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT HMAC_DIGEST_TYPE sha512 KEY_BASE64 wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64 Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_hmac_simple_keys b/test/conf/fwknoprc_hmac_simple_keys index 037718cf..e5280578 100644 --- a/test/conf/fwknoprc_hmac_simple_keys +++ b/test/conf/fwknoprc_hmac_simple_keys @@ -1,72 +1,3 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT KEY_BASE64: dGVzdA== HMAC_KEY_BASE64: dGVzdHRlc3Q= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_invalid_base64_key b/test/conf/fwknoprc_invalid_base64_key index 535cdec3..0daf6d65 100644 --- a/test/conf/fwknoprc_invalid_base64_key +++ b/test/conf/fwknoprc_invalid_base64_key @@ -1,73 +1,3 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - [testssh] KEY_BASE64 w^KMBQlKf4UCARNQmi%25DPxw4xAUaRs21nf8nbRNzUo= - -###EOF### diff --git a/test/conf/fwknoprc_named_key b/test/conf/fwknoprc_named_key index 8a84a9e4..1f5d710b 100644 --- a/test/conf/fwknoprc_named_key +++ b/test/conf/fwknoprc_named_key @@ -1,73 +1,3 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - [testssh] KEY fwknoptest - -###EOF### diff --git a/test/conf/fwknoprc_with_default_base64_key b/test/conf/fwknoprc_with_default_base64_key index 37aac22f..cdb7148e 100644 --- a/test/conf/fwknoprc_with_default_base64_key +++ b/test/conf/fwknoprc_with_default_base64_key @@ -1,71 +1,2 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT KEY_BASE64 w8KMBQlKf4UCARNQmi25DPxw4xAUaRs21nf8nbRNzUo= - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_with_default_key b/test/conf/fwknoprc_with_default_key index 3003cd15..ba6f56d2 100644 --- a/test/conf/fwknoprc_with_default_key +++ b/test/conf/fwknoprc_with_default_key @@ -1,71 +1,2 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT KEY fwknoptest - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - -###EOF### diff --git a/test/conf/fwknoprc_with_named_key b/test/conf/fwknoprc_with_named_key index 8a84a9e4..1f5d710b 100644 --- a/test/conf/fwknoprc_with_named_key +++ b/test/conf/fwknoprc_with_named_key @@ -1,73 +1,3 @@ -# .fwknoprc -############################################################################## -# -# Firewall Knock Operator (fwknop) client rc file. -# -# This file contains user-specific fwknop client configuration default -# and named parameter sets for specific invocations of the fwknop client. -# -# Each section (or stanza) is identified and started by a line in this -# file that contains a single identifier surrounded by square brackets. -# -# The parameters within the stanza typicaly match corresponding client -# command-line parameters. -# -# The first one should always be `[default]' as it defines the global -# default settings for the user. These override the program defaults -# for these parameter. If a named stanza is used, its entries will -# override any of the default. Command-line options will trump them -# all. -# -# Subsequent stanzas will have only the overriding and destination -# specific parameters. -# -# Lines starting with `#' and empty lines are ignored. -# -# See the fwknop.8 man page for a complete list of valid parameters -# and their values. -# -############################################################################## -# -# We start with the 'default' stanza. Uncomment and edit for your -# preferences. The client will use its build-in default for those items -# that are commented out. -# [default] - -#DIGEST_TYPE sha256 -#FW_TIMEOUT 30 -#SPA_SERVER_PORT 62201 -#SPA_SERVER_PROTO udp -#ALLOW_IP -#SPOOF_USER -#SPOOF_SOURCE_IP -#TIME_OFFSET 0 -#USE_GPG N -#GPG_HOMEDIR /path/to/.gnupg -#GPG_SIGNER -#GPG_RECIPIENT - -# User-provided named stanzas: - -# Example for a destination server of 192.168.1.20 to open access to -# SSH for an IP that is resoved externally, and one with a NAT request -# for a specific source IP that maps port 8088 on the server -# to port 88 on 192.168.1.55 with timeout. -# -#[myssh] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/22 -#ALLOW_IP resolve -# -#[mynatreq] -#SPA_SERVER 192.168.1.20 -#ACCESS tcp/8088 -#ALLOW_IP 10.21.2.6 -#NAT_ACCESS 192.168.1.55,88 -#CLIENT_TIMEOUT 60 -# - [testssh] KEY fwknoptest - -###EOF### diff --git a/test/conf/hmac_dual_key_usage_access.conf b/test/conf/hmac_dual_key_usage_access.conf index ddf6190e..5b228e9b 100644 --- a/test/conf/hmac_dual_key_usage_access.conf +++ b/test/conf/hmac_dual_key_usage_access.conf @@ -3,7 +3,6 @@ KEY_BASE64: wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== OPEN_PORTS: tcp/22; FW_ACCESS_TIMEOUT: 2; - SOURCE: ANY; KEY_BASE64: wzNP62oPPgEc+kXDPQLHPOayQBuNbYUTPP+QrErNDmg= HMAC_KEY_BASE64: Yh+xizBnl6FotC5ec7FanVGClRMlsOAPh2u6eovnerfBVKwaVKzjGoblFMHMc593TNyi0dWn4opLoTIV9q/ttg== diff --git a/test/conf/hmac_simple_keys_access.conf b/test/conf/hmac_simple_keys_access.conf index 1815d42b..b9993a1b 100644 --- a/test/conf/hmac_simple_keys_access.conf +++ b/test/conf/hmac_simple_keys_access.conf @@ -1,6 +1,4 @@ SOURCE: ANY; -### key = "test" KEY_BASE64: dGVzdA== -### hmac key = "testtest" HMAC_KEY_BASE64: dGVzdHRlc3Q= FW_ACCESS_TIMEOUT: 3; diff --git a/test/conf/icmp_pcap_filter_fwknopd.conf b/test/conf/icmp_pcap_filter_fwknopd.conf index edadfbf1..047cb6cb 100644 --- a/test/conf/icmp_pcap_filter_fwknopd.conf +++ b/test/conf/icmp_pcap_filter_fwknopd.conf @@ -1,5 +1 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# PCAP_FILTER icmp; diff --git a/test/conf/invalid_source_access.conf b/test/conf/invalid_source_access.conf index 10a72b5e..81fa72f0 100644 --- a/test/conf/invalid_source_access.conf +++ b/test/conf/invalid_source_access.conf @@ -1,7 +1,6 @@ SOURCE :ANY; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: ANY; KEY: fwknoptest2; FW_ACCESS_TIMEOUT: 3; diff --git a/test/conf/ipfw_active_expire_equal_fwknopd.conf b/test/conf/ipfw_active_expire_equal_fwknopd.conf index bd82ca72..994f1873 100644 --- a/test/conf/ipfw_active_expire_equal_fwknopd.conf +++ b/test/conf/ipfw_active_expire_equal_fwknopd.conf @@ -1,6 +1,2 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# IPFW_ACTIVE_SET_NUM 1; IPFW_EXPIRE_SET_NUM 1; diff --git a/test/conf/local_nat_fwknopd.conf b/test/conf/local_nat_fwknopd.conf index 78c67b0c..6a3d3e4c 100644 --- a/test/conf/local_nat_fwknopd.conf +++ b/test/conf/local_nat_fwknopd.conf @@ -1,6 +1,2 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# ENABLE_IPT_FORWARDING Y; ENABLE_IPT_LOCAL_NAT Y; diff --git a/test/conf/multi_stanzas_access.conf b/test/conf/multi_stanzas_access.conf index 70d2befc..8087e5d4 100644 --- a/test/conf/multi_stanzas_access.conf +++ b/test/conf/multi_stanzas_access.conf @@ -1,15 +1,12 @@ SOURCE: 4.3.2.0/24, 23.43.0.0/16, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: 23.43.0.0/16, 123.123.123.123/255.255.255.255, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: 4.3.2.0/24, 127.0.0.0/24, 23.43.0.0/16, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: 4.3.2.0/24, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; diff --git a/test/conf/multi_stanzas_with_broken_keys.conf b/test/conf/multi_stanzas_with_broken_keys.conf index 53b391c2..0591f6f3 100644 --- a/test/conf/multi_stanzas_with_broken_keys.conf +++ b/test/conf/multi_stanzas_with_broken_keys.conf @@ -1,19 +1,15 @@ SOURCE: 4.3.2.0/24, 23.43.0.0/16, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: 23.43.0.0/16, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: 4.3.2.0/24, 127.0.0.0/24, 23.43.0.0/16, 10.10.10.10; KEY: badkey123; FW_ACCESS_TIMEOUT: 3; - SOURCE: 4.3.2.0/24, 127.0.0.0/24, 23.43.0.0/16, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; - SOURCE: 4.3.2.0/24, 10.10.10.10; KEY: fwknoptest; FW_ACCESS_TIMEOUT: 3; diff --git a/test/conf/nat_fwknopd.conf b/test/conf/nat_fwknopd.conf index 06befd16..a44dab3f 100644 --- a/test/conf/nat_fwknopd.conf +++ b/test/conf/nat_fwknopd.conf @@ -1,5 +1 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# ENABLE_IPT_FORWARDING Y; diff --git a/test/conf/tcp_pcap_filter_fwknopd.conf b/test/conf/tcp_pcap_filter_fwknopd.conf index 481868df..92a18ea1 100644 --- a/test/conf/tcp_pcap_filter_fwknopd.conf +++ b/test/conf/tcp_pcap_filter_fwknopd.conf @@ -1,5 +1 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# PCAP_FILTER port 62201; diff --git a/test/conf/tcp_server_fwknopd.conf b/test/conf/tcp_server_fwknopd.conf index e4832d0f..66b5cf98 100644 --- a/test/conf/tcp_server_fwknopd.conf +++ b/test/conf/tcp_server_fwknopd.conf @@ -1,7 +1,3 @@ -# -# The default fwknopd.conf contains only comments since defaults are defined in -# code and modified via the config file -# PCAP_FILTER tcp port 62201; ENABLE_TCP_SERVER Y; TCPSERV_PORT 62201;