Michael Rash
2e96ece4b0
Update to ensure libfko.so path is detected properly on OpenBSD
2011-10-28 22:42:27 -04:00
Michael Rash
464dbe95d0
Update to print all firewall commands in --verbose mode
...
This commit makes it easier to determine exactly which commands fwknopd
runs in --verbose mode when interacting with the underlying firewall.
This commit also adds --verbose --verbose mode to the test suite.
2011-10-27 21:51:55 -04:00
Michael Rash
1c6fc0f3f8
update to detect loopback interface
2011-10-24 20:48:56 -04:00
Michael Rash
c9860811f5
added LD_LIBRARY_PATH to all fwknop/fwknopd commands to make manual command execution easier
2011-10-22 22:29:27 -04:00
Michael Rash
50bcc537ee
added digest cache validation after GPG tests
2011-10-22 22:06:00 -04:00
Michael Rash
1b8606461c
minor update to match include/exclude criteria on the whole test message
2011-10-22 21:54:22 -04:00
Michael Rash
9e3a4b4c92
extended packet validity tests in GPG mode
2011-10-22 21:29:44 -04:00
Michael Rash
09e6ed1405
added first GPG complete cycle SPA test
2011-10-22 16:48:30 -04:00
Michael Rash
e4f4ee7825
added test to validate digest.cache structure
2011-10-22 14:25:56 -04:00
Michael Rash
266150218a
added -P bpf test for complete SPA cycle over non standard SPA port
2011-10-22 10:57:25 -04:00
Michael Rash
0ab39a64a5
added -P bpf filter test
2011-10-22 10:48:37 -04:00
Michael Rash
6848983b47
added Rijndael SPA validity tests
2011-10-21 23:43:08 -04:00
Michael Rash
081b58d951
added rule timeout detection
2011-10-21 23:13:24 -04:00
Michael Rash
9b816ed29a
added replay attack detection test
2011-10-21 22:55:45 -04:00
Michael Rash
caf458ad3f
added first complete SPA cycle test
2011-10-20 23:33:41 -04:00
Michael Rash
6f699f7e5d
added client/server interaction test capability
2011-10-20 00:06:58 -04:00
Michael Rash
e479e776db
Added usage of sudo for recompilation test
...
The test suite now recompiles fwknop only if the --enable-recompile-check
option is used, and if so, uses sudo (if installed) to have the resulting
binaries own by the original user (instead of by root). Also made a couple
of API changes to create test output files automatically if they don't
exist.
2011-10-17 22:55:01 -04:00
Michael Rash
45ecc6f399
minor bugfix to ensure that the proper firewall is used to collect system specs
2011-10-13 20:41:12 -04:00
Michael Rash
103cd2a8fb
added the test/conf/ directory for config files use by the test suite
2011-10-13 20:30:05 -04:00
Michael Rash
64160a0c57
started on basic SPA generation, updated to use LD_LIBRARY_PATH for local libfko instance
2011-10-13 20:29:19 -04:00
Michael Rash
a1f4a65f27
interim commit to add major functionality to the fwknop test suite
2011-10-12 23:37:28 -04:00
Michael Rash
26f58a705d
minor update to account for hardening-check return values
2011-10-06 22:53:27 -04:00
Michael Rash
1a3e1caffe
Initial start on a test suite
...
This commit begins development on a comprehensive test suite for fwknop.
The initial tests are focused on compilation correctness and security options
as determined by the "hardening-check" script from Kees Cook of the Debian
security team.
2011-10-04 23:15:04 -04:00
