DeforaNetworks/fwknop
DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity

[test suite] added iptables OUTPUT chain test

Browse Source
This commit is contained in:
Michael Rash 2014-06-24 22:54:27 -04:00
parent a4615a76b5
commit e41e0f5aaf
10 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Makefile.am
View File

@ -245,6 +245,7 @@ EXTRA_DIST = \
test/conf/icmp_pcap_filter_fwknopd.conf \
test/conf/invalid_expire_access.conf \
test/conf/invalid_source_access.conf \
test/conf/ipt_output_chain_fwknopd.conf \
test/conf/invalid_ipt_input_chain_fwknopd.conf \
test/conf/invalid_ipt_input_chain_2_fwknopd.conf \
test/conf/invalid_ipt_input_chain_3_fwknopd.conf \

1
test/conf/invalid_ipt_input_chain_2_fwknopd.conf
View File

@ -1,2 +1 @@
# default config - no variables set to allow defaults to be preserved
IPT_INPUT_ACCESS AACCEPT, filter, INPUT, 1, FWKNOP_INPUT_TEST, 1;

1
test/conf/invalid_ipt_input_chain_3_fwknopd.conf
View File

@ -1,2 +1 @@
# default config - no variables set to allow defaults to be preserved
IPT_INPUT_ACCESS ACCEPT, ffilter, INPUT, 1, FWKNOP_INPUT_TEST, 1;

1
test/conf/invalid_ipt_input_chain_4_fwknopd.conf
View File

@ -1,2 +1 @@
# default config - no variables set to allow defaults to be preserved
IPT_INPUT_ACCESS ACCEPT, filter, IINPUT, 1, FWKNOP_INPUT_TEST, 1;

1
test/conf/invalid_ipt_input_chain_5_fwknopd.conf
View File

@ -1,2 +1 @@
# default config - no variables set to allow defaults to be preserved
IPT_INPUT_ACCESS ACCEPT, filter, INPUT, -1, FWKNOP_INPUT_TEST, 1;

1
test/conf/invalid_ipt_input_chain_6_fwknopd.conf
View File

@ -1,2 +1 @@
# default config - no variables set to allow defaults to be preserved
IPT_INPUT_ACCESS ACCEPT, filter, INPUT, 1, FWKNOP_INPUT_TEST, -1;

1
test/conf/invalid_ipt_input_chain_fwknopd.conf
View File

@ -1,2 +1 @@
# default config - no variables set to allow defaults to be preserved
IPT_INPUT_ACCESS ACCEPT, filter, INPUT, 1 FWKNOP_INPUT_TEST, 1;

2
test/conf/ipt_output_chain_fwknopd.conf Normal file
View File

@ -0,0 +1,2 @@
ENABLE_IPT_OUTPUT Y;
IPT_OUTPUT_ACCESS ACCEPT, filter, OUTPUT, 1, FWKNOP_OUTPUT, 1;

1
test/test-fwknop.pl
View File

@ -78,6 +78,7 @@ our %cf = (
'future_exp_access' => "$conf_dir/future_expired_stanza_access.conf",
'exp_epoch_access' => "$conf_dir/expired_epoch_stanza_access.conf",
'invalid_exp_access' => "$conf_dir/invalid_expire_access.conf",
'ipt_output_chain' => "$conf_dir/ipt_output_chain_fwknopd.conf",
'invalid_ipt_input_chain' => "$conf_dir/invalid_ipt_input_chain_fwknopd.conf",
'invalid_ipt_input_chain2' => "$conf_dir/invalid_ipt_input_chain_2_fwknopd.conf",
'invalid_ipt_input_chain3' => "$conf_dir/invalid_ipt_input_chain_3_fwknopd.conf",

12
test/tests/rijndael_hmac.pl
View File

@ -95,6 +95,18 @@
'fw_rule_removed' => $NEW_RULE_REMOVED,
'key_file' => $cf{'rc_hmac_b64_key'},
},
{
'category' => 'Rijndael+HMAC',
'subcategory' => 'client+server',
'detail' => 'iptables OUTPUT chain',
'function' => \&spa_cycle,
'cmdline' => $default_client_hmac_args,
'fwknopd_cmdline' => "$fwknopdCmd -c $cf{'ipt_output_chain'} -a $cf{'hmac_access'} " .
"-d $default_digest_file -p $default_pid_file $intf_str",
'fw_rule_created' => $NEW_RULE_REQUIRED,
'fw_rule_removed' => $NEW_RULE_REMOVED,
'key_file' => $cf{'rc_hmac_b64_key'},
},
{
'category' => 'Rijndael+HMAC',