DeforaNetworks/fwknop
DeforaNetworks/fwknop
3
0
Fork 0
Code Releases Activity
2,643 Commits 15 Branches 0 Tags
Commit Graph

338 Commits

Author SHA1 Message Date
Michael Rash
fb69921fdd add ALLOW_ANY_USER_AGENT to ignore incoming User-Agent strings in SPA packets over HTTP, closes #296 2019-03-11 21:56:21 -07:00
Michael Rash
2857a9cb1b [test suite] fix whitespace trailing chars test 2018-10-27 21:21:52 -04:00
Michael Rash
bacd054b13 strip trailing whitespace from config values, closes #288 2018-10-24 23:40:13 -04:00
Michael Rash
3c717b8e69 [test suite] use 'badhost.' so local resolution will not be an issue (Michael Dukelsky) 2018-08-24 20:07:34 -07:00
Michael Rash
799ec87765 [client] write --server-resolve-ipv4 arg to the rc file when saving 2018-08-11 09:42:20 -07:00
Michael Rash
5339179c8e [test suite] NO_SAVE_ARGS rc file code coverage 2018-08-11 08:43:47 -07:00
Michael Rash
69291b91fa [test suite] add invalid ALLOW_IP test 2018-08-11 08:23:41 -07:00
Michael Rash
40d554103c [test suite] add negative time offset test to hit additional error path in client/config_init.c 2018-08-11 08:15:26 -07:00
Michael Rash
5a305ffe07 [test suite] improve ASAN instrumentation check (m32 vs. non-m32 Makefile option) 2018-08-10 07:44:10 -07:00
Pierre Pronchery
0b475ec7b3 Use execvp() instead of execvpe() 
execvp() is (usually) equivalent to execvpe(), without enforcing any
change to the environment. However, unlike execvp(), execvpe() is not
standardized by POSIX, and may therefore not be available nor detected
when configuring the project (like on NetBSD).

No place could be found in fwknop to be using execvpe() and changing the
environment. Therefore it seems only logical (and safer) to use execvp()
instead.

This also updates the tests to reflect this change.
 2018-08-06 12:04:45 +02:00
Michael Rash
d7412af09e [test suite] don't use shell redirection char in bogus IP string 2016-12-09 19:23:11 -05:00
Michael Rash
f5509bcd0c [server] Add MAX_FW_TIMEOUT to access.conf variables. 
[server] Add MAX_FW_TIMEOUT to access.conf stanzas to allow a
maximum number of seconds for client-specified timeouts in SPA packets.
This fixes issue #226 which was spotted by Jeremiah Rothschild.
 2016-09-29 22:18:13 -04:00
Michael Rash
183a9c5118 [docs] update links to Jonathan's new github username 2016-07-03 23:39:13 -04:00
Jonathan Bennett
a651b092cc [Test suite] Typo fix 2016-05-30 14:33:19 -05:00
Jonathan Bennett
df47ed4ecd [test suite] Modify test to work with iptables 2016-05-30 14:24:51 -05:00
Michael Rash
2937bc1058 [test suite] fix NAT DNS bad host check 2016-05-28 05:24:29 -07:00
Michael Rash
7f12fc72d1 [test suite] more NAT DNS coverage 2016-05-28 05:06:07 -07:00
Michael Rash
3a10ccff4d [test suite] NAT DNS test coverage fix 2016-05-28 04:39:04 -07:00
Michael Rash
8366e118e2 [server] negative testing for ENABLE_NAT_DNS 2016-05-27 23:33:13 -07:00
Michael Rash
6e54e9452a [test suite] add ENABLE_RULE_PREPEND test 2016-05-26 19:21:07 -07:00
Jonathan Bennett
6a8a554851 [Test suite] Adds tests for invalid server and client cmd lines involving --key-gen 2016-05-26 10:07:23 -05:00
Jonathan Bennett
d804ba33f5 [Test suite] Adds --no-rc-file tests 2016-05-25 21:21:48 -05:00
Jonathan Bennett
b0c0242054 [Test suite] Add a couple of tests for --no-home-dir 2016-05-25 09:31:06 -05:00
Jonathan Bennett
16dd3f4d32 [Test suite] Adds libfiu test to emulate failure in set_sig_handlers() 2016-05-24 22:02:42 -05:00
Michael Rash
08c6a9d4e2 [test suite] trigger a couple of -p errors for code coverage 2016-05-24 19:00:58 -07:00
Michael Rash
270d8bea62 [test suite] fault injection test for build_cmd() error path 2016-05-24 18:40:44 -07:00
Michael Rash
5194b4b69a [test suite] minor test addition for sudo exec groups and code coverage 2016-05-23 19:24:40 -07:00
Michael Rash
a3adca69e1 [test suite] add HMAC SHA3_256 complete cycle test 2016-05-21 06:18:46 -07:00
Jonathan Bennett
55b9eac37c Test Suite: tweak a test to avoid --verbose in client call 2016-05-20 21:42:46 -05:00
Michael Rash
09fcad0f04 [test suite] add HMAC_SHA3_512 test 2016-05-20 18:45:20 -07:00
Michael Rash
1d5fc8498f [test suite] add HMAC include_keys_file() test 2016-05-19 19:41:39 -07:00
Michael Rash
e46938d5d1 [test suite] additional code coverage tests for include_keys_file() 2016-05-17 18:21:03 -07:00
Michael Rash
8334473887 Merge pull request #219 from oneru/test-suite 2016-05-14 23:19:17 -04:00
Jonathan Bennett
ef72883f8e test suite: update test to search for correct failure message 2016-05-14 00:59:00 -05:00
Michael Rash
be3c356661 [libfko] account for SHA3_256 and SHA3_512 digest lengths matching SHA256 and SHA512 2016-05-13 09:25:06 -07:00
Michael Rash
4707c4f3c3 [test suite] add SHA3_512 test for the client 2016-05-12 22:14:08 -07:00
Jonathan Bennett
66eedd4f7f Test suite: Adds workaround for tcp server test 2016-05-11 19:31:48 -05:00
Jonathan Bennett
7b11166260 Fix bogus NAT IP tests 2016-05-07 22:02:30 -05:00
Jonathan Bennett
c6e95820a4 Add tests for include_keys 2016-05-05 13:26:35 -05:00
Jonathan Bennett
4eec3bd0c2 Test suite: Change sleep_cycle in fw_check to sleep for half seconds 2016-05-03 10:47:34 -05:00
Jonathan Bennett
da4e713ac3 Adds the c_unit tests to the perl test suite 2016-05-01 15:28:42 -05:00
Michael Rash
163176be7c [test suite] increase client timeout args for '-f client timeout' test (@oneru) 2016-05-01 10:35:03 -04:00
Michael Rash
d462b025c3 [test suite] fix sudo tests (localhost -> ALL) from @oneru 2016-04-30 09:36:36 -04:00
Michael Rash
e7f039699c [test suite] fix 'FORCE_SNAT and 0.0.0.0' test (@oneru) 2016-04-30 09:33:29 -04:00
Michael Rash
9d92f65a03 [test suite] add test for X-Fowarded-For header 2016-04-16 07:40:24 -07:00
Michael Rash
f648fca6a2 [test suite] apply loopback interface to invalid pcap filter test 2016-04-11 20:47:29 -04:00
Michael Rash
06e42a3cfa [test suite] first test for include_keys functionality 2016-02-21 11:50:41 -08:00
Michael Rash
fcb0102d69 [test suite] allow for different ordering of access.conf files in %include_folder directive 2015-12-23 10:56:41 -05:00
Michael Rash
e7f1813962 [test suite] implement different access stanza init strategy, 'complete cycle, include (3)' test passes now 2015-12-20 18:17:42 -08:00
Michael Rash
dd2f4c2c38 [test suite] restore args too long tests 2015-12-19 16:36:45 -08:00