Michael Rash
67dd1d5bdd
[server] bug fix to allow IP-formatted masks for SOURCE lines in access.conf
2014-04-12 15:21:00 -04:00
Michael Rash
b243bb4bb7
[client] fix minor memory leak before exit() in parsing invalid time offsets
2014-04-11 22:45:27 -04:00
Michael Rash
b422f1b9a7
[test suite] implement new fwknopd access/fwknopd.conf file writing feature similar to client rc file writing/testing
2014-04-10 23:10:11 -04:00
Michael Rash
55d1ee3fd9
[test suite] --key-* arg validation with --fd 0
2014-04-09 23:56:50 -04:00
Michael Rash
0ff2100993
[test suite/client] memory leak bug fix and test coverage
...
This commit fixes a minor memory leak in the fwknop client before
calling exit() when an abnormally large number of command line arguments
are given. The leak was found with valgrind together with the test
suite (specifically the 'show last args (4)' test):
==23748== 175 bytes in 50 blocks are definitely lost in loss record 1 of 1
==23748== at 0x4C2C494: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==23748== by 0x1112F1: run_last_args (fwknop.c:991)
==23748== by 0x110D36: prev_exec (fwknop.c:916)
==23748== by 0x10D953: main (fwknop.c:170)
Additional test coverage was added for the client via the
basic_operations.pl tests.
2014-04-08 21:12:46 -04:00
Michael Rash
e5169d0878
[test suite] env HOME tests, -R http resolve tests
2014-04-08 11:15:53 -04:00
Michael Rash
d9c1eb8f51
[test suite] more client/config_init.c test coverage
2014-04-07 22:31:56 -04:00
Michael Rash
5da38165ef
[test suite] KEY_FILE and HMAC_KEY_FILE tests
2014-04-06 22:21:14 -04:00
Michael Rash
c6cb892a05
[test suite] more client/config_init.c test coverage
2014-04-06 22:14:10 -04:00
Michael Rash
5176cd0976
[test suite] additional test coverage for client/config_init.c
2014-04-06 21:27:15 -04:00
Michael Rash
4d63644ce7
[test suite] additional test coverage for client/config_init.c
2014-04-06 15:42:22 -04:00
Michael Rash
710720b237
[test suite] non-default stanza digest update test
2014-04-05 23:09:04 -04:00
Michael Rash
e95d601a48
[test suite] added --key-gen -K file path too long test
2014-04-05 21:51:56 -04:00
Michael Rash
48eb5fcc94
[test suite] added key file path too long tests
2014-04-05 21:29:24 -04:00
Michael Rash
d0d77ba67f
[test suite] added rc file path too long test
2014-04-05 08:19:20 -04:00
Michael Rash
1ec1443768
[test suite] add several validation tests to exercise various client/config_init.c lines
2014-04-04 23:03:03 -04:00
Michael Rash
b8492d4319
[test suite] added --key-rijndael and --key-hmac tests
2014-04-03 22:52:53 -04:00
Michael Rash
2da2704d4c
[test suite] fwknoprc GPG tests, more time offset tests
2014-04-03 19:30:58 -04:00
Michael Rash
e4a382a87f
[test suite] save pkt to file tests
2014-04-03 10:04:52 -04:00
Michael Rash
083db46416
[test suite] added popen() 'n' answer test
2014-04-03 08:56:27 -04:00
Michael Rash
00fed6132c
[test suite] additional save rc file variable coverage
2014-04-02 23:55:00 -04:00
Michael Rash
e60d491864
[test suite] basic ops save rc stanza --encryption-mode tests
2014-04-01 14:22:10 -04:00
Michael Rash
78dd3ea43b
[test suite] basic ops save rc stanza time offset minus test
2014-04-01 14:19:49 -04:00
Michael Rash
9f10c3ede6
[test suite] basic ops save rc stanza time offset tests
2014-04-01 14:18:14 -04:00
Michael Rash
b005287aa6
[test suite] basic ops get key tests
2014-04-01 14:09:00 -04:00
Michael Rash
f2484e599f
[test suite] rc file time offset tests
2014-04-01 10:41:36 -04:00
Michael Rash
50e454216c
[test suite] additional critical var popen() tests
2014-03-31 13:54:10 -04:00
Michael Rash
8ed9728fd3
[test suite] add coverage test for client -M legacy truncated key
2014-03-31 13:44:46 -04:00
Michael Rash
5b6c3768fb
[test suite] exercise client rc file ask overwrite feature via popen()
2014-03-31 08:02:08 -04:00
Michael Rash
3ca546092b
[test suite] additional rc file code coverage tests
2014-03-29 22:23:45 -04:00
Michael Rash
a9fb3c05db
[test suite] minor typo fix
2014-03-29 21:45:10 -04:00
Michael Rash
22b1b2d9d2
[test suite] additional client/config_init.c code coverage test for fwknoprc file parsing
2014-03-29 21:44:24 -04:00
Michael Rash
9c86477e72
[test suite] HTTP proxy tests for client/spa_comm.c test coverage
2014-03-29 15:05:52 -04:00
Michael Rash
535bcdf2a6
[test suite] IP resolution tests for client/http_resolve_host.c coverage
2014-03-29 14:53:52 -04:00
Michael Rash
73bc473563
[client+server] verify GnuPG signatures by default
...
- [server] When GnuPG is used, the default now is to require that
incoming SPA packets are signed by a key listed in GPG_REMOTE_ID for each
access.conf stanza. In other words, the usage of GPG_REQUIRE_SIG
is no longer necessary in order to authenticate SPA packets via the
GnuPG signature. Verification of GnuPG signatures can be disabled with a
new access.conf variable GPG_DISABLE_SIG, but this is NOT a
recommended configuration.
- [client+server] Add --gpg-exe command line argument and GPG_EXE
config variable to ~/.fwknoprc and the access.conf file so that the path
to GnuPG can be changed from the default /usr/bin/gpg path.
2014-03-25 19:53:13 -04:00
Michael Rash
00f878c5ed
[test suite] add --spoof-user test
2014-03-17 22:36:49 -04:00
Michael Rash
b33a6e4c22
[test suite] ensure the fko multi-call wrapper is executed under valgrind
2014-03-17 21:43:36 -04:00
Michael Rash
2f9c20fb27
[test suite] minor bug fix to add udpraw mode for spoofed src test
2014-03-16 09:11:31 -04:00
Michael Rash
9e990c9be0
fix header non-ascii chars, and introduce test suite support for detecting this in source files
2014-03-14 09:14:35 -04:00
Michael Rash
ad512ff6e7
[test suite] added Rijndael+HMAC SPOOF_SRC fwknoprc file test
2014-03-13 21:43:51 -04:00
Michael Rash
4181b43f55
[test suite] Added Rijndael+HMAC NAT rand port via client rc file test
2014-03-13 20:10:26 -04:00
Michael Rash
83595bdabb
[test suite] Added Rijndael+HMAC command execution test
2014-03-13 19:40:47 -04:00
Michael Rash
873b06b422
[test suite] added portrange bpf filter test
2014-02-07 07:49:50 -05:00
Michael Rash
63a829803e
[test suite] added --client-only mode for the test suite
2014-01-17 09:19:13 -05:00
Michael Rash
a347be354d
merged android4.4_support branch
2014-01-10 22:46:54 -05:00
Michael Rash
283c72e463
[test suite] run fko-wrapper without valgrind, closes #113
2013-12-29 19:59:16 -05:00
Michael Rash
509dcf93dd
[android] added HMAC test along with non-legacy Rijndael test
2013-12-23 23:15:11 -05:00
Michael Rash
aeed8323f7
[test suite] multi-packet pcap test for pcap_dispatch() validation
...
This commit adds a new pcap file to the test suite with an SPA packet after
99 other garbage packets. This can be used for pcap_dispatch() testing,
though this is not meant to be super instensive - it is just to ensure that
if a PCAP_DISPATCH_COUNT of, say, 10 is selected that the SPA is still seen
by fwknopd. This commit is in support of #110 .
2013-12-10 21:56:20 -06:00
Michael Rash
46b5f2ecaf
[server] added the ability to use FORCE_MASQUERADE to access.conf stanzas
2013-12-05 23:00:19 -05:00
Michael Rash
e0114e60c2
[server] Added FORCE_SNAT to access.conf stanzas.
...
Added FORCE_SNAT to the access.conf file so that per-access stanza SNAT
criteria can be specified for SPA access.
2013-12-04 21:52:07 -05:00
