Commit Graph

162 Commits

Author SHA1 Message Date
Michael Rash
160a9e5565 perl FKO module HMAC compatibility 2013-01-20 14:27:27 -05:00
Michael Rash
fc4825b331 added backwards compatibility test for 2.0.4 client->server 2013-01-19 18:17:29 -05:00
Michael Rash
47ea800889 merged in fwknop-2.0.4 changes 2013-01-18 17:25:16 -05:00
Michael Rash
59fe04787b [test suite] minor 're-run make' bug fix for perl FKO module installation 2012-12-09 15:25:14 -05:00
Michael Rash
a673406ebd [test suite] updated fuzzing tests to allow usernames with '.' chars 2012-12-08 20:58:17 -05:00
Michael Rash
05d4299de1 made compilation warning check case-insensitive 2012-12-07 14:53:27 -05:00
Michael Rash
fe8ac98004 bug fix for firewall rule deletion check in backwards compatibility tests on FreeBSD and OpenBSD 2012-11-21 21:29:26 -05:00
Michael Rash
5a2150e070 [test suite] minor update to not look for lib/.libs/ in --enable-recompile mode 2012-11-15 22:36:29 -05:00
Michael Rash
9921e72d70 [test suite] backwards compatibility tests
Added a few backwards compatibility tests for versions of fwknop going back to
2.0, and also added a compatibility test for an SPA packet produced by Android
4.2.1.
2012-11-15 21:16:11 -05:00
Michael Rash
38d4b5cc88 minor marking text update around fuzzing packet count 2012-11-13 21:18:29 -05:00
Michael Rash
c0349a20a3 added fuzzing packet count to FKO server fuzzing test 2012-11-09 20:42:43 -05:00
Michael Rash
66ad134708 [server] Added '--pcap-file <file>' option
Added a new '--pcap-file <file>' option to allow pcap files to
be processed directly by fwknopd instead of sniffing an interface.  This
feature is mostly intended for debugging purposes.
2012-11-08 21:33:23 -05:00
Michael Rash
2ae1449122 allow '_' chars in usernames provided to libfko 2012-11-08 21:02:44 -05:00
Michael Rash
575e696164 [test suite] added pinentry check for gpg tests that have keys that require associated passphrases 2012-11-05 20:38:34 -05:00
Michael Rash
5c1979e16a Added test suite config file: disable_aging_nat_fwknopd.conf 2012-11-04 22:13:52 -05:00
Michael Rash
231be81f5b bug fix to include multi-gpg ID no password test 2012-11-03 23:11:24 -04:00
Michael Rash
dbf6dc8846 --enable-recompile try raw make if sudo make fails 2012-11-03 18:09:12 -04:00
Michael Rash
5218e52f9a added run-test-suite.sh LD_LIBRARY_PATH wrapper 2012-11-03 16:50:26 -04:00
Michael Rash
8c3a67377e [test suite] bug fix to ensure binary existence check in build security tests 2012-10-30 21:23:30 -04:00
Michael Rash
aa74fa3eed minor fuzzing README update 2012-10-28 23:31:09 -04:00
Michael Rash
cefac6275b added non digit rand val fuzzing encoding tests 2012-10-27 22:45:28 -04:00
Michael Rash
dced7c6a77 added fuzzing encoding strip eq return packets 2012-10-27 22:34:52 -04:00
Michael Rash
4b25e1e242 added encoding_append_b64_modified_byte equals sign fuzzing encoding tests 2012-10-27 22:28:33 -04:00
Michael Rash
807dd315e5 added encoding_append_b64_modified_byte fuzzing encoding tests 2012-10-27 22:07:40 -04:00
Michael Rash
03255a5547 added non-base64 char to access msg for fuzzing encoding tests 2012-10-26 23:13:41 -04:00
Michael Rash
f3c9f49a67 added fuzzing encoding packets (extra colon 3) 2012-10-26 23:07:35 -04:00
Michael Rash
e89338c431 added fuzzing encoding packets (extra colon 2) 2012-10-26 23:06:09 -04:00
Michael Rash
69ed7ee635 added fuzzing encoding packets (extra colon 1) 2012-10-26 21:47:08 -04:00
Michael Rash
830996b3ac added non-base64 encoding fuzzing packets 2012-10-26 15:52:09 -04:00
Michael Rash
60083cc272 added rm colon5 fuzzing packets 2012-10-25 22:12:47 -04:00
Michael Rash
3ae583813c added fuzzing encoding test that removes colon #5 2012-10-25 22:04:09 -04:00
Michael Rash
91596f4450 added fuzzing encoding test that removes colon #4 2012-10-25 22:01:12 -04:00
Michael Rash
ef635d57e3 added test/fuzzing/patches/encoding_rm_colon1.patch file 2012-10-25 21:57:40 -04:00
Michael Rash
165e618bad Added fuzzing encoding tests that remove the 2nd and 3rd colons 2012-10-25 21:55:01 -04:00
Michael Rash
f6b0d23c1c Added fuzzing spa packet generation for invalid encodings
This commit adds the ability to generate SPA packets that are valid except for
the last encoding step before encryption.  This is independent of supplying
invalid data for SPA packet fields.  To invoke the test suite in this mode,
do something like:

 # ./test-fwknop.pl --enable-perl-module-pkt-gen  --fuzzing-test-tag "encoded_colon1_missing"  --fuzzing-class encoding

This assumes that lib/fko_encode.c has been patched to subvert the encoding
step itself before encryption.  In this case, the first colon after the random
value is removed.
2012-10-25 21:37:52 -04:00
Michael Rash
b3889289b3 added non-base64 user character fuzzing SPA packets 2012-10-25 00:42:02 -04:00
Michael Rash
d16643affa added extra_timestamp_digit fuzzing SPA packets 2012-10-25 00:29:01 -04:00
Michael Rash
e8312c26b9 added colon_1_to_a fuzzing SPA packets 2012-10-25 00:24:19 -04:00
Michael Rash
de512e7d8f added fuzzing/README file 2012-10-25 00:20:55 -04:00
Michael Rash
6a649e26e7 easier SPA fuzzing packet generation and importing 2012-10-25 00:20:08 -04:00
Michael Rash
691d9503ee added test/fuzzing/ directory for fuzzing data and patches 2012-10-19 22:14:24 -04:00
Michael Rash
54297086ba fixed --enable-recompile argument for OpenBSD 2012-10-18 23:10:02 -04:00
Michael Rash
3eaa7dcb5f added libfko validate_username() for decrypted SPA data 2012-10-18 23:01:54 -04:00
Michael Rash
692e336880 added 'Rejected' messages to test output for bogus SPA packet perl FKO tests 2012-10-18 22:24:48 -04:00
Michael Rash
d5c3fc4b1c removed non-SPA packet lines 2012-10-18 22:24:11 -04:00
Michael Rash
cc58adc7fc added bogus_spa_packets file for perl FKO fuzzing tests 2012-10-18 22:08:38 -04:00
Michael Rash
b218977c61 continued validation code driven by perl FKO module 2012-10-16 21:23:43 -04:00
Michael Rash
e0d86f9a33 [libfko] validation of NAT access strings
Added validation of NAT access strings in the various NAT modes in libfko.
This applies to both the client and server, and test suite support was added
as well.
2012-10-15 20:52:23 -04:00
Michael Rash
bf22778ada added perl FKO module client timeout test 2012-10-13 14:08:38 -04:00
Michael Rash
1910cd1ecf additional perl FKO module access message test strings 2012-10-13 11:38:23 -04:00