21149faf89
Bug fix for a crash in libfko that could be triggered in fko_set_username() when a username that is 64 chars or longer is specified. This crash cannot be triggered in fwknopd even if an SPA packet contains such a username however due to additional protections in the SPA decoding routines. Further, this bug does not apply to the main fwknop client either because the maximal username size is truncated down below 64 bytes. Hence, this bug only applies to client-side software that is directly using libfko calling the fko_set_username() function.
4098 lines
162 KiB
Perl
4098 lines
162 KiB
Perl
@basic_operations = (
|
|
{
|
|
'category' => 'basic operations',
|
|
'detail' => 'dump config',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/SYSLOG_IDENTITY/],
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd -c $cf{'def'} " .
|
|
"-a $cf{'def_access'} --dump-config",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'detail' => 'override config',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/ENABLE_PCAP_PROMISC.*\'Y\'/],
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args " .
|
|
"-O $conf_dir/override_fwknopd.conf --dump-config",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'detail' => 'multiple override configs',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/ENABLE_PCAP_PROMISC.*\'N\'/,
|
|
qr/FILTER.*1234/],
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd -c $cf{'def'} -a $cf{'def_access'} " .
|
|
"-d $default_digest_file -p $default_pid_file --dump-config " .
|
|
"-O $conf_dir/override_fwknopd.conf,$conf_dir/override2_fwknopd.conf",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'detail' => 'config var expansion',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/test\.pid/],
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd -c $conf_dir/var_expansion_fwknopd.conf " .
|
|
"-a $cf{'def_access'} -d $default_digest_file --dump-config "
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'detail' => 'invalid config var expansion',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/Invalid embedded/],
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd -c $conf_dir/var_expansion_invalid_fwknopd.conf " .
|
|
"-a $cf{'def_access'} -d $default_digest_file --dump-config "
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'dump error codes',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args " .
|
|
"--dump-serv-err-codes",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'start restart stop cycle',
|
|
'function' => \&server_start_stop_cycle,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'exit upon down interface',
|
|
'function' => \&down_interface,
|
|
'fwknopd_cmdline' => "$fwknopdCmd -c $cf{'def'} -a $cf{'hmac_access'} " .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str",
|
|
'server_positive_output_matches' => [qr/Fatal error from pcap_dispatch\b/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'no exit upon down interface',
|
|
'function' => \&down_interface,
|
|
'fwknopd_cmdline' => "$fwknopdCmd -c $cf{'no_exit_down_intf'} " .
|
|
"-a $cf{'hmac_access'} -d $default_digest_file -p " .
|
|
"$default_pid_file $intf_str",
|
|
'server_positive_output_matches' => [qr/Error from pcap_dispatch\b/],
|
|
'no_exit_intf_down' => $YES
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'show last args (1)',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/Could\snot|Last\sfwknop/i],
|
|
'exec_err' => $IGNORE,
|
|
'cmdline' => "$fwknopCmd --show-last",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'show last args (2)',
|
|
'function' => \&rm_last_args,
|
|
'positive_output_matches' => [qr/Could\snot|Last\sfwknop/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd --show-last",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'show last args (3)',
|
|
'function' => \&rm_last_args,
|
|
'positive_output_matches' => [qr/Unable\sto\sdetermine/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "env -u HOME $fwknopCmd --show-last --rc-file $cf{'rc_def_key'}",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'show last args (4)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd --save-args-file empty.args " .
|
|
"--show-last --rc-file $cf{'rc_def_key'}",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'save args too long',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -A tcp/22 -a $fake_ip -D $loopback_ip " .
|
|
"--get-key $local_key_file --save-args-file too_long.args " . "-A tcp/22 "x300
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'previous args (1)',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/max\scommand\sline\sargs/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -l --save-args-file invalid.args",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'previous args (2)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -l --save-args-file /dev/null",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '--get-key path validation',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/could\snot\sopen/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"-D $loopback_ip --get-key not/there",
|
|
'fatal' => $YES
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'require [-s|-R|-a]',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/must\suse\sone\sof/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -D $loopback_ip",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '--allow-ip <IP> valid IP',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/Invalid\sallow\sIP/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -A tcp/22 -a invalidIP -D $loopback_ip",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '-A <proto>/<port> specification (proto)',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/Invalid\sSPA\saccess\smessage/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -A invalid/22 -a $fake_ip -D $loopback_ip",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '-A <proto>/<port> specification (port)',
|
|
'function' => \&generic_exec,
|
|
'positive_output_matches' => [qr/Invalid\sSPA\saccess\smessage/i],
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd -A tcp/600001 -a $fake_ip -D $loopback_ip",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '--spoof-user (long user)',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$default_client_hmac_args --spoof-user " . 'A'x80
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'env SPOOF_USER (long user)',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "SPOOF_USER=" . 'A'x80 . ' ' . $default_client_hmac_args
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'generate SPA packet',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => $default_client_args,
|
|
'fatal' => $YES
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA packet --key-rijndael',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "$default_client_args_no_get_key --key-rijndael fwknoptest",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-rijndael --key-len',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "$default_client_args_no_get_key --key-rijndael fwknoptest --key-len 10",
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-rijndael --key-hmac',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "$default_client_args_no_get_key --key-rijndael " .
|
|
"fwknoptest --key-hmac testing",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-hmac --hmac-key-len',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "$default_client_args_no_get_key --key-rijndael " .
|
|
"fwknoptest --key-hmac testing --hmac-key-len 7",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA invalid --hmac-key-len',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key --key-rijndael " .
|
|
"fwknoptest --key-hmac testing --hmac-key-len 999999",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA invalid --key-len',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key --key-rijndael " .
|
|
"fwknoptest --key-len 999999",
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA packet --key-base64-rijndael',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "$default_client_args_no_get_key " .
|
|
"--key-base64-rijndael Zndrbm9wdGVzdA==",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA packet base64 --key-hmac',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "$default_client_args_no_get_key --key-base64-rijndael " .
|
|
"Zndrbm9wdGVzdA== --key-base64-hmac dGVzdGluZw==",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA packet undef LOGNAME',
|
|
'function' => \&client_send_spa_packet,
|
|
'cmdline' => "env -u LOGNAME $default_client_args_no_get_key --key-base64-rijndael " .
|
|
"Zndrbm9wdGVzdA== --key-base64-hmac dGVzdGluZw==",
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'libfko',
|
|
'detail' => 'acquire FKO context',
|
|
'function' => \&fko_wrapper_exec,
|
|
'wrapper_compile' => 'all',
|
|
'wrapper_script' => $wrapper_exec_script,
|
|
'wrapper_binary' => cwd() . '/' . $fko_wrapper_dir . '/fko_basic',
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'libfko',
|
|
'detail' => 'acquire FKO context (with valgrind)',
|
|
'function' => \&fko_wrapper_exec,
|
|
'wrapper_compile' => 'all',
|
|
'wrapper_script' => $wrapper_exec_script_valgrind,
|
|
'wrapper_binary' => cwd() . '/' . $fko_wrapper_dir . '/fko_basic',
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-base64-rijndael invalid (1)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key --key-base64-rijndael a%aaaaaaaaaaa"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-base64-rijndael invalid (2)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key --key-base64-rijndael " . 'QUFB'x100 ### 'A' base64 encoded
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-base64-hmac invalid (1)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key " .
|
|
"--key-base64-rijndael aaaaaaaaaaaaa --key-base64-hmac a%aaaaaaa"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'SPA --key-base64-hmac invalid (2)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key " .
|
|
"--key-base64-rijndael aaaaaaaaaaaaa --key-base64-hmac " . 'QUFB'x300 ### 'A' base64 encoded
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid key file path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"-D $loopback_ip --get-key invalidpath --no-save-args $verbose_str"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid key file format',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"-D $loopback_ip --get-key $invalid_key_file --no-save-args $verbose_str"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid key file format (2)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"-D $loopback_ip --get-key $invalid_key_file2 --no-save-args $verbose_str"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid key file format (3)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"-D $loopback_ip --get-key $invalid_key_file3 --no-save-args $verbose_str"
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid home dir path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "HOME=" . 'A'x1050 . " $default_client_args --stanza-list"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid rc file path stanza list',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args --rc-file invalidpath --stanza-list"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid rc file path /dev/null',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopCmd --rc-file /dev/null"
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid rc file path too long',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args --rc-file " . 'A'x1030 . " --stanza-list"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '--key-gen file path (-K) too long',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args --key-gen -K " . 'A'x1030
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => '--key-gen file path (-K) too long',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd --key-gen --key-gen-file " . 'A'x1030
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'GPG missing recipient',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args_no_get_key --gpg-encryption",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG invalid binary path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args --gpg-exe /invalid/path"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'sudo invalid binary path (1)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args --sudo-exe /invalid/path"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'sudo invalid binary path (2)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args --sudo-exe /etc/hosts"
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'HTTP proxy proto mismatch',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args --http-proxy invalid -P udp",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'resolve HTTP proxy invalid port',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$default_client_args --http-proxy http://www.cipherdyne.org:99999/cgi-bin/myip -P http",
|
|
},
|
|
|
|
### rc tests
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'invalid var',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'BADVAR' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'invalid var (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_rewrite_rc_args -n nondefault",
|
|
'write_rc_file' => [
|
|
{'name' => 'default', 'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}},
|
|
{'name' => 'nondefault', 'vars' => {'BADKEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}
|
|
],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'invalid var format',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => '#'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sentry/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'invalid verbose val',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1',
|
|
'VERBOSE' => 100}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'KEY_FILE path',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY_FILE' => $local_key_file, 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Random\sValue/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'HMAC_KEY_FILE path',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY_FILE'
|
|
=> $local_hmac_key_file, 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Random\sValue/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'invalid digest val',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'invalid proto val',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'digest MD5',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*MD5/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'digest SHA1',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'digest SHA256',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA256'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'digest SHA384',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA384'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA384/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'digest SHA512',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA512'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA512/],
|
|
},
|
|
### rc tests: spa server proto
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server proto UDP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'positive_output_matches' => [qr/protocol:\sudp/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server proto TCP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'TCP'}}],
|
|
'positive_output_matches' => [qr/protocol:\stcp/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server proto HTTP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'HTTP'}}],
|
|
'positive_output_matches' => [qr/protocol:\shttp/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server proto TCPRAW',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'TCPRAW'}}],
|
|
'positive_output_matches' => [qr/protocol:\stcpraw/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server proto ICMP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'ICMP'}}],
|
|
'positive_output_matches' => [qr/protocol:\sicmp/],
|
|
},
|
|
### rc tests: spa server port
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server port 65421',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PORT' => '65421'}}],
|
|
'positive_output_matches' => [qr/destination\sport:\s65421/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa server port 22',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PORT' => '22'}}],
|
|
'positive_output_matches' => [qr/destination\sport:\s22/],
|
|
},
|
|
### rc tests: spa source port
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa source port 65421',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SOURCE_PORT' => '65421'}}],
|
|
'positive_output_matches' => [qr/source\sport:\s65421/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'spa source port 22',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SOURCE_PORT' => '22'}}],
|
|
'positive_output_matches' => [qr/source\sport:\s22/],
|
|
},
|
|
### rc tests: firewall timeout
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'firewall timeout 1234s',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '1234'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s1234/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'firewall timeout 0s',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '0'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s0/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'timeout --fw-timeout 1234s',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '1234'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s1234/],
|
|
},
|
|
|
|
### rc tests: hmac digest
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'HMAC digest MD5',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*MD5/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'HMAC digest SHA1',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'HMAC digest SHA256',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA256'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'HMAC digest SHA384',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA384'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA384/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client rc file',
|
|
'detail' => 'HMAC digest SHA512',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => $client_rewrite_rc_args,
|
|
'write_rc_file' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA512'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA512/],
|
|
},
|
|
### rc file saving --save-rc-stanza
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-rijndael',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --key-rijndael newkey",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/KEY.*newkey/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-hmac',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --key-hmac hmackey",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/HMAC_KEY.*hmackey/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest MD5',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --digest-type MD5",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*MD5/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*MD5/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA1',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --digest-type SHA1",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'non-default update',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n nondefault --digest-type SHA1",
|
|
'save_rc_stanza' => [
|
|
{'name' => 'default', 'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}, ### with extraneous spaces
|
|
{'name' => ' nondefault', 'vars' => {'KEY' => 'testtest', ' DIGEST_TYPE' => 'MD5'}} ### with extraneous spaces
|
|
],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*MD5/, qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'non-default update (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n nondefault --digest-type SHA1",
|
|
'save_rc_stanza' => [
|
|
{'name' => 'default', 'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}},
|
|
{'name' => 'nondefault', 'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}},
|
|
{'name' => 'nondefault2', 'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}
|
|
],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*MD5/, qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'require stanza name or -D',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"--no-save-args $verbose_str --rc-file $save_rc_file --key-gen " .
|
|
"--save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Must\suse.*destination/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'require SPA destination',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"--no-save-args $verbose_str --rc-file $save_rc_file " .
|
|
"--save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Must\suse.*destination/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid SPA destination (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"--no-save-args $verbose_str -D .168.10.1 -n default " .
|
|
"--rc-file $save_rc_file --save-rc-stanza --force-stanza",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/packet\snot\ssent/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'invalid SPA destination (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"--no-save-args $verbose_str -D badhost -n default " .
|
|
"--rc-file $save_rc_file --save-rc-stanza --force-stanza",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/packet\snot\ssent/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'invalid base64 HMAC key',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY_BASE64' => 'testtest', 'HMAC_KEY_BASE64' => 'aaa%aaaa',
|
|
'DIGEST_TYPE' => 'MD5'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/look\slike\sbase64/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*MD5/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'invalid base64 key',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY_BASE64' => 'tes%test', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/look\slike\sbase64/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*MD5/],
|
|
},
|
|
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA1 ask (y)/n (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'client_popen' => 'y', ### interact with ask overwrite feature
|
|
'positive_output_matches' => [qr/Updating\sparam.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA1 ask (y)/n (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'HMAC_KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'client_popen' => 'y', ### interact with ask overwrite feature
|
|
'positive_output_matches' => [qr/Updating\sparam.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA1 ask (y)/n (3)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY_BASE64' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'client_popen' => 'y', ### interact with ask overwrite feature
|
|
'positive_output_matches' => [qr/Updating\sparam.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA1 ask (y)/n (4)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'HMAC_KEY_BASE64' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'client_popen' => 'y', ### interact with ask overwrite feature
|
|
'positive_output_matches' => [qr/Updating\sparam.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA1 ask y/(n) (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_force --key-gen -n default " .
|
|
"--digest-type SHA1 --use-hmac",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY_BASE64' => 'dGVzdHRlc3Q=', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'client_popen' => 'n', ### interact with ask overwrite feature
|
|
'positive_output_matches' => [qr/Updating\sparam.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/KEY_BASE64.*dGVzdHRlc3Q=/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA256',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --digest-type SHA256",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA256/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA384',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --digest-type SHA384",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA384/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA384/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'digest SHA512',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --digest-type SHA512",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA512/],
|
|
'rc_positive_output_matches' => [qr/DIGEST_TYPE.*SHA512/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--use-hmac',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args --use-hmac -n default",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/USE_HMAC.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-user',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --spoof-user someuser",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Username\:\ssomeuser/],
|
|
'rc_positive_output_matches' => [qr/SPOOF_USER.*someuser/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-user invalid',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --spoof-user some=user",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Args\scontain\sinvalid/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-user (long user)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default " .
|
|
"--spoof-user " . 'A'x80,
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Username\:\sAAAA/],
|
|
'rc_positive_output_matches' => [qr/SPOOF_USER.*AAAA/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-source 3.3.3.3',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -P udpraw --spoof-source 3.3.3.3",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/SPOOF_SOURCE_IP.*3.3.3.3/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-source invalid',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -P udpraw --spoof-source invalid",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1',
|
|
'SPOOF_SOURCE_IP' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sspoof/],
|
|
'rc_positive_output_matches' => [qr/SPOOF_SOURCE_IP.*invalid/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-source invalid -P',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -P invalid --spoof-source 3.3.3.3",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1',
|
|
'SPOOF_SOURCE_IP' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Unrecognized\sproto/],
|
|
'rc_positive_output_matches' => [qr/SPOOF_SOURCE_IP.*invalid/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--spoof-src.. invalid -P',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -P tcp --spoof-source 3.3.3.3",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1',
|
|
'SPOOF_SOURCE_IP' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Must\sset.*udpraw/],
|
|
'rc_positive_output_matches' => [qr/SPOOF_SOURCE_IP.*invalid/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-r rand port',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -r",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/, qr/destination\sport\:\s(?!62201)/],
|
|
'rc_positive_output_matches' => [qr/RAND_PORT.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat-local',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --nat-local",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_LOCAL' => 'Y'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s127.0.0.1\,22/],
|
|
'rc_positive_output_matches' => [qr/NAT_LOCAL.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat-local -f 1234',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --nat-local --fw-timeout 1234",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_LOCAL' => 'Y',
|
|
'FW_TIMEOUT' => '1111'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s127.0.0.1\,22/],
|
|
'rc_positive_output_matches' => [qr/NAT_LOCAL.*Y/, qr/FW_TIMEOUT.*1234/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat 192.168.10.1:12345',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -N 192.168.10.1:12345",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s192.168.10.1\,12345/],
|
|
'rc_positive_output_matches' => [qr/NAT_ACCESS.*192.168.10.1\:12345/],
|
|
},
|
|
# {
|
|
# 'category' => 'basic operations',
|
|
# 'subcategory' => 'client save rc file',
|
|
# 'detail' => '--nat 192.168.10.1:99999',
|
|
# 'function' => \&client_rc_file,
|
|
# 'cmdline' => "$client_save_rc_args -n default -N 192.168.10.1:99999",
|
|
# 'save_rc_stanza' => [{'name' => 'default',
|
|
# 'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
# 'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
# 'positive_output_matches' => [qr/Nat\sAccess\:\s192.168.10.1\,12345/],
|
|
# 'rc_positive_output_matches' => [qr/NAT_ACCESS.*192.168.10.1\:12345/],
|
|
# },
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat client timeout 1234s',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -N 192.168.10.1:12345 -f 1234",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1',
|
|
'FW_TIMEOUT' => '1111'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s192.168.10.1\,12345/],
|
|
'rc_positive_output_matches' => [qr/NAT_ACCESS.*192.168.10.1\:12345/,
|
|
qr/FW_TIMEOUT.*1234/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat client timeout 0s',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -N 192.168.10.1:12345 -f 0",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1',
|
|
'FW_TIMEOUT' => '0'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s192.168.10.1\,12345/],
|
|
'rc_positive_output_matches' => [qr/NAT_ACCESS.*192.168.10.1\:12345/,
|
|
qr/FW_TIMEOUT.*0/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat-rand-port',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -N 192.168.10.1:12345 --nat-rand-port",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_RAND_PORT' => '0',
|
|
'NAT_ACCESS' => '192.168.10.1:33333'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s192.168.10.1\,12345/],
|
|
'rc_positive_output_matches' => [qr/NAT_ACCESS.*192.168.10.1\:12345/, qr/NAT_RAND_PORT.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--nat-port 22211',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -N 192.168.10.1:12345 --nat-port 22211",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_PORT' => '11111'}}],
|
|
'positive_output_matches' => [qr/Nat\sAccess\:\s192.168.10.1\,12345/, qr/Message.*22211/],
|
|
'rc_positive_output_matches' => [qr/NAT_ACCESS.*192.168.10.1\:12345/, qr/NAT_PORT.*22211/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'NAT invalid access (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp -a $fake_ip " .
|
|
"-D $loopback_ip --rc-file $save_rc_file --save-rc-stanza " .
|
|
"--force-stanza --test -n default -N 192.168.10.1:12345 --nat-port 22211",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_PORT' => '11111'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Expecting.*A\sarg/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'NAT invalid access (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -a $fake_ip " .
|
|
"-D $loopback_ip --rc-file $save_rc_file --save-rc-stanza " .
|
|
"--force-stanza --test -n default -N 192.168.10.1:12345 --nat-port 22211",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_PORT' => '11111'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sSPA\saccess/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'NAT invalid access (3)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22 -a $fake_ip " .
|
|
"-D $loopback_ip --rc-file $save_rc_file --save-rc-stanza " .
|
|
"--force-stanza --test -n default -N .168.10.1 --nat-port 22211",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_PORT' => '11111'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Unable\sto\sresolve/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'NAT invalid access (4)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/99999 -a $fake_ip " .
|
|
"-D $loopback_ip --rc-file $save_rc_file --save-rc-stanza " .
|
|
"--force-stanza --test -n default -N 192.168.10.1:99999 --nat-port 22211",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_PORT' => '11111'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sport/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'NAT invalid access (5)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp -a $fake_ip " .
|
|
"-D $loopback_ip --rc-file $save_rc_file --save-rc-stanza " .
|
|
"--force-stanza --test -n default -N 192.168.10.1:12345",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sSPA\saccess\smessage/]
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'NAT invalid multi-port -A',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$lib_view_str $valgrind_str $fwknopCmd -A tcp/22,tcp/123 -a $fake_ip " .
|
|
"-D $loopback_ip --rc-file $save_rc_file --save-rc-stanza " .
|
|
"--force-stanza --test -n default -N 192.168.10.1:12345 --nat-port 22211",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1', 'NAT_PORT' => '11111'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/NAT\sfor\smultiple/]
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'save pkt to file',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -s -B run/spa.pkt",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'ALLOW_IP' => 'source'}}],
|
|
'positive_output_matches' => [qr/Message.*0.0.0.0/],
|
|
'rc_positive_output_matches' => [qr/ALLOW_IP.*0.0.0.0/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'save pkt to file (append)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -s -b -B run/spa.pkt",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'ALLOW_IP' => 'source'}}],
|
|
'positive_output_matches' => [qr/Message.*0.0.0.0/],
|
|
'rc_positive_output_matches' => [qr/ALLOW_IP.*0.0.0.0/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'allow source',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default -s",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'ALLOW_IP' => 'source'}}],
|
|
'positive_output_matches' => [qr/Message.*0.0.0.0/],
|
|
'rc_positive_output_matches' => [qr/ALLOW_IP.*0.0.0.0/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve -u user agent',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R -u FwknopTestSuite/2.6",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Resolved/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTP.*Y/, qr/HTTP_USER_AGENT.*FwknopTestSuite\/2.6/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url http://www.cipherdyne.org/cgi-bin/myip",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Resolved/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTP.*Y/, qr/RESOLVE_URL.*cipherdyne.org.*myip/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url www.cipherdyne.org/cgi-bin/myip",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Resolved/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTP.*Y/, qr/RESOLVE_URL.*\swww.cipherdyne.org.*myip/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http (3)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url http://127.0.0.1/",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Could not resolve IP.*wget/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTP.*Y/, qr/RESOLVE_URL.*127.0.0.1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http (4)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url http://127.0.0.1",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Could not resolve IP.*wget/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTP.*Y/, qr/RESOLVE_URL.*127.0.0.1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http (5)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url http://www.cipherdyne.org/cgi-bin/myip",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Warning.*IP resolution URL/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTPS.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http (6)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url https://www.cipherdyne.org/cgi-bin/myip",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Resolved/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTPS.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve valid wget',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --wget-cmd wget",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $NO,
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTPS.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R wget user-agent',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --use-wget-user-agent",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $NO,
|
|
'rc_positive_output_matches' => [qr/USE_WGET_USER_AGENT.*Y/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve http only',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-http-only",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $NO,
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTPS.*Y/,
|
|
qr/RESOLVE_HTTP_ONLY.*Y/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve invalid wget',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --wget-cmd invalidpath",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Could not resolve IP/],
|
|
'rc_positive_output_matches' => [qr/RESOLVE_IP_HTTPS.*Y/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve invalid url (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url http://127.0.0.1" . '1'x300 . '/test.cgi',
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Error\sparsing/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '-R resolve invalid url (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_test -n default -R --resolve-url http://127.0.0.1/" . 'A'x1200,
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Error\sparsing/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--get-key',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --get-key somefile",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/KEY.*somefile/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'key file too long',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --get-key " . 'A'x1030,
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Could\snot\sopen/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*2/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--get-hmac-key',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --get-hmac-key somefile",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/KEY.*somefile/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'HMAC key file too long',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --get-hmac-key " . 'A'x1030,
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Could\snot\sopen/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*2/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--time-offset-plus 1M',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --time-offset-plus 1M",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/TIME_OFFSET.*60/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'time offset invalid (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --time-offset-plus invalid",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1',
|
|
'TIME_OFFSET' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
'rc_positive_output_matches' => [qr/TIME_OFFSET.*invalid/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'time offset invalid (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --time-offset-plus 123456789999",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1',
|
|
'TIME_OFFSET' => '123456789999'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
'rc_positive_output_matches' => [qr/TIME_OFFSET.*123456789999/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--time-offset-plus 1H',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --time-offset-plus 1H",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/TIME_OFFSET.*3600/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--time-offset-plus 1D',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --time-offset-plus 1D",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/TIME_OFFSET.*86400/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--time-offset-minus 1M',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --time-offset-minus 1M",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/TIME_OFFSET.*\-60/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'encryption mode legacy',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --encryption-mode legacy",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/ENCRYPTION_MODE.*legacy/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'encryption mode legacy (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --encryption-mode legacy",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1',
|
|
'ENCRYPTION_MODE' => 'legacy', 'USE_HMAC' => 'Y'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/incompatible\swith\sHMAC/],
|
|
'rc_positive_output_matches' => [qr/ENCRYPTION_MODE.*legacy/],
|
|
},
|
|
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--encryption-mode invalid',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --encryption-mode invalid",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1',
|
|
'ENCRYPTION_MODE' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
'rc_positive_output_matches' => [qr/ENCRYPTION_MODE.*invalid/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--encryption-mode CBC',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --encryption-mode CBC",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/Digest\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/ENCRYPTION_MODE.*CBC/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'HMAC digest MD5',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --hmac-digest-type MD5",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'SHA1'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*MD5/],
|
|
'rc_positive_output_matches' => [qr/HMAC_DIGEST_TYPE.*MD5/, qr/USE_HMAC.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'HMAC digest SHA1',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --hmac-digest-type SHA1",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA1/],
|
|
'rc_positive_output_matches' => [qr/HMAC_DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'HMAC digest SHA256',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --hmac-digest-type SHA256",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA256/],
|
|
'rc_positive_output_matches' => [qr/HMAC_DIGEST_TYPE.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'HMAC digest SHA384',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --hmac-digest-type SHA384",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA384/],
|
|
'rc_positive_output_matches' => [qr/HMAC_DIGEST_TYPE.*SHA384/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'HMAC digest SHA512',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --hmac-digest-type SHA512",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'HMAC_KEY' => 'hmactest',
|
|
'HMAC_DIGEST_TYPE' => 'MD5'}}],
|
|
'positive_output_matches' => [qr/HMAC\sType\:\s.*SHA512/],
|
|
'rc_positive_output_matches' => [qr/HMAC_DIGEST_TYPE.*SHA512/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa server proto UDP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto UDP",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'TCP'}}],
|
|
'positive_output_matches' => [qr/protocol:\sudp/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*udp/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa server proto TCP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto TCP",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'positive_output_matches' => [qr/protocol:\stcp/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*tcp/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa server proto HTTP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto HTTP",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'positive_output_matches' => [qr/protocol:\shttp/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*http/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa server proto TCPRAW',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto TCPRAW",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'positive_output_matches' => [qr/protocol:\stcpraw/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*tcpraw/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa server proto ICMP',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto ICMP",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'positive_output_matches' => [qr/protocol:\sicmp/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*icmp/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'invalid ICMP type',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto ICMP --icmp-type 9999",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sicmp/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*UDP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'invalid ICMP code',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-proto ICMP --icmp-code 9999",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PROTO' => 'UDP'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Invalid\sicmp/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PROTO.*UDP/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa source port 65421',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --source-port 65421",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SOURCE_PORT' => '65531'}}],
|
|
'positive_output_matches' => [qr/source\sport:\s65421/],
|
|
'rc_positive_output_matches' => [qr/SPA_SOURCE_PORT.*65421/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'spa destination port 65421',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --server-port 65421",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'SPA_SERVER_PORT' => '65531'}}],
|
|
'positive_output_matches' => [qr/destination\sport:\s65421/],
|
|
'rc_positive_output_matches' => [qr/SPA_SERVER_PORT.*65421/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'firewall timeout 1234s',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args -n default --fw-timeout 1234",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s1234/],
|
|
'rc_positive_output_matches' => [qr/FW_TIMEOUT.*1234/],
|
|
'rc_negative_output_matches' => [qr/USE_HMAC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--verbose',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default --fw-timeout 1234 --verbose",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s1234/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*Y/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => $verbose_str,
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s1234/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*2/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'no --verbose',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Client\sTimeout:\s1234/],
|
|
'rc_negative_output_matches' => [qr/VERBOSE/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--use-hmac --key-gen',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Wrote.*HMAC.*keys/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*(Y|\d)/,
|
|
qr/USE_HMAC.*Y/, qr/KEY_BASE64/, qr/HMAC_KEY_BASE64/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-gen HMAC MD5',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen --hmac-digest-type MD5",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Wrote.*HMAC.*keys/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*(Y|\d)/,
|
|
qr/USE_HMAC.*Y/, qr/KEY_BASE64/, qr/HMAC_KEY_BASE64/,
|
|
qr/HMAC_DIGEST_TYPE.*MD5/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-gen HMAC SHA1',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen --hmac-digest-type SHA1",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Wrote.*HMAC.*keys/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*(Y|\d)/,
|
|
qr/USE_HMAC.*Y/, qr/KEY_BASE64/, qr/HMAC_KEY_BASE64/,
|
|
qr/HMAC_DIGEST_TYPE.*SHA1/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-gen HMAC SHA256',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen --hmac-digest-type SHA256",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Wrote.*HMAC.*keys/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*(Y|\d)/,
|
|
qr/USE_HMAC.*Y/, qr/KEY_BASE64/, qr/HMAC_KEY_BASE64/,
|
|
qr/HMAC_DIGEST_TYPE.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-gen HMAC SHA384',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen --hmac-digest-type SHA384",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Wrote.*HMAC.*keys/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*(Y|\d)/,
|
|
qr/USE_HMAC.*Y/, qr/KEY_BASE64/, qr/HMAC_KEY_BASE64/,
|
|
qr/HMAC_DIGEST_TYPE.*SHA384/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-gen HMAC SHA512',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen --hmac-digest-type SHA512",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'positive_output_matches' => [qr/Wrote.*HMAC.*keys/],
|
|
'rc_positive_output_matches' => [qr/VERBOSE.*(Y|\d)/,
|
|
qr/USE_HMAC.*Y/, qr/KEY_BASE64/, qr/HMAC_KEY_BASE64/,
|
|
qr/HMAC_DIGEST_TYPE.*SHA512/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => '--key-gen HMAC invalid',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$client_save_rc_args_no_verbose -n default " .
|
|
"--fw-timeout 1234 $verbose_str --use-hmac --key-gen --hmac-digest-type invalid",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30'}}],
|
|
'exec_err' => $YES,
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG use agent',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer --gpg-encryption "
|
|
. "--gpg-agent --gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'USE_GPG_AGENT' => 'Y', 'GPG_SIGNER' => 'invalid'}}],
|
|
'positive_output_matches' => [qr/GPG sig verify/],
|
|
'rc_positive_output_matches' => [qr/GPG_SIGNER/, qr/GPG_RECIPIENT/,
|
|
qr/GPG_HOMEDIR/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG same signing key (1)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer --gpg-encryption "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid'}}],
|
|
'positive_output_matches' => [qr/GPG sig verify/],
|
|
'rc_positive_output_matches' => [qr/GPG_SIGNER/, qr/GPG_RECIPIENT/,
|
|
qr/GPG_HOMEDIR/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG same signing key (2)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer --gpg-encryption "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid',
|
|
'GPG_AGENT' => 'N'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
'rc_positive_output_matches' => [qr/GPG_SIGNER/, qr/GPG_HOMEDIR/]
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG same signing key (3)',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer --gpg-encryption "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid',
|
|
'USE_GPG_AGENT' => 'N', 'GPG_NO_SIGNING_PW' => 'Y'}}],
|
|
'positive_output_matches' => [qr/GPG sig verify/],
|
|
'rc_positive_output_matches' => [qr/GPG_SIGNER/, qr/GPG_HOMEDIR/]
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG invalid sign pw',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw "
|
|
. "--gpg-exe invalidpath "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNING_PW_BASE64' => 'aaa%aaa'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Parameter\serror/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG invalid exe',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--gpg-exe invalidpath "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Unable\sto\sstat/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG invalid homedir',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_gpg_args_same_key_signer "
|
|
. "--gpg-home-dir invalidpath --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/Unable\sto\sstat/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG invalid recip',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_args "
|
|
. "--gpg-recipient-key invalid --gpg-signer-key $gpg_client_key "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/key\sfor.*not\sfound/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG invalid signer',
|
|
'function' => \&client_rc_file,
|
|
'cmdline' => "$default_client_args "
|
|
. "--gpg-recipient-key $gpg_client_key --gpg-signer-key invalid "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --gpg-no-signing-pw "
|
|
. "--rc-file $save_rc_file --save-rc-stanza --force-stanza --test",
|
|
'save_rc_stanza' => [{'name' => 'default',
|
|
'vars' => {'KEY' => 'testtest', 'FW_TIMEOUT' => '30',
|
|
'GPG_HOMEDIR' => 'somepath', 'GPG_SIGNER' => 'invalid'}}],
|
|
'exec_err' => $YES,
|
|
'positive_output_matches' => [qr/key\sfor.*not\sfound/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client save rc file',
|
|
'detail' => 'GPG signer pw fd 0',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "echo test | $default_client_args_no_get_key "
|
|
. "--gpg-recipient-key $gpg_client_key --gpg-signer-key $gpg_client_key "
|
|
. "--gpg-home-dir $gpg_client_home_dir_no_pw --fd 0 --test",
|
|
'positive_output_matches' => [qr/sig\sID/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'list current fwknopd fw rules',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args --fw-list",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'list current fw rules (2)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --fw-list",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'FWKNOP_RUN_DIR ' . cwd() . "/$run_tmp_dir" ### test coverage for mkdir
|
|
],
|
|
'positive_output_matches' => [qr/to\screate/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'run dir non-directory',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --fw-list",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'FWKNOP_RUN_DIR ' . cwd() . "/$cf{'def'}"
|
|
],
|
|
'positive_output_matches' => [qr/NOT a directory/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'unrecognized arg displays usage',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -X",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'list all current fw rules',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args --fw-list-all",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'flush current firewall rules',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args --fw-flush",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid pcap filter',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f -P proto invalid",
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid config path /dev/null',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd -c /dev/null -a $cf{'def_access'} " .
|
|
"-p $default_pid_file $intf_str --exit-parse-config ",
|
|
'exec_err' => $YES,
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'digest cache validation',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$fwknopdCmd -c $cf{'def'} -a $cf{'def_access'} " .
|
|
"-p $default_pid_file $intf_str --exit-parse-config " .
|
|
"-d $rewrite_digest_file -v -v -v -v",
|
|
'exec_err' => $YES,
|
|
'digest_cache_file' => [
|
|
'ybbYzHw4QMLd3rAlifxSAIedifnchUyuU0NW02hC6Zs 17 127.0.0.1 37246 127.0.0.1 62201 1399089310',
|
|
'rrrrrrrrU369w8emmAyP4NMx9CvgkvplpfRt1306fns 17 -127.0.0.1 58901 127.0.0.1 62201 1399089319',
|
|
'ttttttttU369w8emmAyP4NMx9CvgkvplpfRt1306fns 17 -127..0.1 58901 127.0.0.1 62201 1399089319',
|
|
'kVpIRhGJU369w8emmAyP4NMx9CvgkvplpfRt1306fns 17 127.0.0.1 58901 127. 62201 1399089319',
|
|
'cXzry4ouzEAymxSRaUqTcRNniIMRCXOn7OhNMps0Bag 17',
|
|
'YuoJRQDtKF7EdnA8JGCsVa5YsLu1az/oPeBTJ7J6Qws 17 127.0.0.1 36767 127.0.0.1 62201 1399089338'
|
|
],
|
|
'positive_output_matches' => [qr/invalid\sdigest\sfile\sentry/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid -C packet count',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
### add a few additional command line args for test coverage
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f " .
|
|
"-l somelocale --pcap-any-direction --syslog-enable -C 999999999999",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid locale',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $NO,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f " .
|
|
"-l somelocale --dump-config",
|
|
'positive_output_matches' => [qr/Unable to set locale/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid run dir path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd -c $cf{'invalid_run_dir_path'} " .
|
|
"-a $cf{'def_access'} -f --dump-config",
|
|
'positive_output_matches' => [qr/is not absolute/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'sniff invalid interface',
|
|
'function' => \&server_conf_files,
|
|
'exec_err' => $YES,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -i invalidintf -f",
|
|
'positive_output_matches' => [qr/pcap_open_live.*error/],
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'ENABLE_PCAP_PROMISC Y'
|
|
],
|
|
},
|
|
|
|
### test syslog config
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_DAEMON',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_DAEMON',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL0',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL0',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL1',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL1',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL2',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL2',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL3',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL3',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL4',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL4',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL5',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL5',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL6',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL6',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL7',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL7',
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'syslog LOG_LOCAL8',
|
|
'function' => \&server_conf_files,
|
|
'exec_err' => $YES,
|
|
'fwknopd_cmdline' => "$lib_view_str $valgrind_str $fwknopdCmd " .
|
|
"-c $rewrite_fwknopd_conf -a $rewrite_access_conf " .
|
|
"-d $default_digest_file -p $default_pid_file -D --syslog-enable",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'SYSLOG_FACILITY LOG_LOCAL8',
|
|
],
|
|
'positive_output_matches' => [qr/Invalid SYSLOG_FACILITY/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'mutually exclusive -K and -R',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
### add a few additional command line args for test coverage
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f -K -R --exit-parse-config"
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'mutually exclusive -D and -R',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
### add a few additional command line args for test coverage
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f -D -R --exit-parse-config"
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid config file path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd -f -c invalid --exit-parse-config",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid access.conf file path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd -f -c $cf{'def'} -a invalid --exit-parse-config",
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG invalid --gpg-home-dir path',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f --gpg-home-dir invalidpath --exit-parse-config",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG invalid --gpg-home-dir path (2)',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd $default_server_conf_args -f --exit-parse-config --gpg-home-dir " . 'A'x1200
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG require sig ID or fingerprint',
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
'cmdline' => "$fwknopdCmd -c $cf{'def'} -a $cf{'gpg_no_pw_no_fpr_access'} " .
|
|
"-d $default_digest_file -p $default_pid_file -f --exit-parse-config",
|
|
'positive_output_matches' => [qr/Must have either sig/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG require sig and disable sig set',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => "$fwknopdCmd -c $cf{'def'} -a $cf{'gpg_no_sig_no_fpr_access'} " .
|
|
"-d $default_digest_file -p $default_pid_file -f --exit-parse-config",
|
|
'positive_output_matches' => [qr/GPG_REQUIRE_SIG and GPG_DISABLE_SIG are both set/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'start',
|
|
'function' => \&server_start,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args $intf_str",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'stop',
|
|
'function' => \&server_stop,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args $intf_str",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'write PID',
|
|
'function' => \&write_pid,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args $intf_str",
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => '--packet-limit 1 exit',
|
|
'function' => \&server_packet_limit,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args --packet-limit 1 $intf_str",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'UDP server --packet-limit 1 exit',
|
|
'function' => \&server_packet_limit,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args --udp-server --packet-limit 1 $intf_str",
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'ignore packets < min SPA len (140)',
|
|
'function' => \&server_ignore_small_packets,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args --packet-limit 1 $intf_str",
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => '-P bpf filter ignore packet',
|
|
'function' => \&server_bpf_ignore_packet,
|
|
'cmdline' => $default_client_args,
|
|
'fwknopd_cmdline' => "$fwknopdCmd $default_server_conf_args --packet-limit 1 $intf_str " .
|
|
qq|-P "udp port $non_std_spa_port"|,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE INPUT spec",
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"invalid_${fw_conf_prefix}_input_chain"} -a $cf{'def_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str --exit-parse-config",
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE INPUT spec (2)",
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"invalid_${fw_conf_prefix}_input_chain2"} -a $cf{'def_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str",
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE INPUT spec (3)",
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"invalid_${fw_conf_prefix}_input_chain3"} -a $cf{'def_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str",
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE INPUT spec (4)",
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"invalid_${fw_conf_prefix}_input_chain4"} -a $cf{'def_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str",
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE INPUT spec (5)",
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"invalid_${fw_conf_prefix}_input_chain5"} -a $cf{'def_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str --exit-parse-config",
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE INPUT spec (6)",
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"invalid_${fw_conf_prefix}_input_chain6"} -a $cf{'def_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str --exit-parse-config",
|
|
'function' => \&generic_exec,
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid pcap dispatch count',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
],
|
|
'server_conf_file' => [
|
|
'PCAP_DISPATCH_COUNT 9999999999'
|
|
],
|
|
'positive_output_matches' => [qr/invalid\sPCAP_DISPATCH_COUNT/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid tcp server port',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
],
|
|
'server_conf_file' => [
|
|
'TCPSERV_PORT 9999999999'
|
|
],
|
|
'positive_output_matches' => [qr/not in the range/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid udp server port',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
],
|
|
'server_conf_file' => [
|
|
'UDPSERV_PORT 9999999999'
|
|
],
|
|
'positive_output_matches' => [qr/not in the range/],
|
|
},
|
|
|
|
### command cycle tests
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'no CMD_CYCLE_CLOSE',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_CYCLE_OPEN /some/cmd -args',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/also setting CMD_CYCLE_CLOSE/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'no CMD_CYCLE_OPEN',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_CYCLE_CLOSE /some/cmd -args',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/also setting CMD_CYCLE_OPEN/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'no CMD_CYCLE_TIMER',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_CYCLE_OPEN /some/cmd -args',
|
|
'CMD_CYCLE_CLOSE /some/othercmd -args',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Must set.*CMD_CYCLE_TIMER/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'CMD_CYCLE_OPEN too long',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_CYCLE_OPEN ' . 'A'x500,
|
|
'CMD_CYCLE_CLOSE /some/othercmd -args',
|
|
'CMD_CYCLE_TIMER 30',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/CMD_CYCLE_OPEN.*too long/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'CMD_CYCLE_CLOSE too long',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_CYCLE_CLOSE ' . 'A'x500,
|
|
'CMD_CYCLE_OPEN /some/othercmd -args',
|
|
'CMD_CYCLE_TIMER 30',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/CMD_CYCLE_CLOSE.*too long/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'CMD_CYCLE_TIMER invalid',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_CYCLE_OPEN /some/cmd -args',
|
|
'CMD_CYCLE_CLOSE /some/othercmd -args',
|
|
'CMD_CYCLE_TIMER 300000000',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/CMD_CYCLE_TIMER.*not in range/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'no access SOURCE',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
' DUMMY fdsafds#'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/not\sfind.*SOURCE/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE invalid jump rule position",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_INPUT_ACCESS ACCEPT, filter, INPUT, 400000, FWKNOP_INPUT_TEST, 1;"
|
|
],
|
|
'positive_output_matches' => [qr/invalid jump rule position/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE invalid chain rule position",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_INPUT_ACCESS ACCEPT, filter, INPUT, 1, FWKNOP_INPUT_TEST, 400000;"
|
|
],
|
|
'positive_output_matches' => [qr/invalid chain rule position/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid config line format',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'PCAP_FILTER'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sconfig\sfile\sentry/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'variable substitution',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'PCAP_FILTER $NOVAR proto test'
|
|
],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'locale setting',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'LOCALE C'
|
|
],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid VERBOSE var setting',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'VERBOSE -1'
|
|
],
|
|
'positive_output_matches' => [qr/not\sin\sthe\srange/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => '__CHANGEME__ key (1)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY __CHANGEME__'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/KEY\s.*not\sproperly/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => '__CHANGEME__ key (2)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY_BASE64 __CHANGEME__'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/KEY_BASE64\s.*not\sproperly/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'non-base64 key',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY_BASE64 %%%%%%%%%%%%%'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/look\slike\sbase64/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'HMAC key __CHANGEME__ (1)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'HMAC_KEY __CHANGEME__'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/KEY\s.*not\sproperly/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'HMAC key __CHANGEME__ (2)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'HMAC_KEY_BASE64 __CHANGEME__'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/KEY_BASE64\s.*not\sproperly/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'HMAC non-base64 key',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'HMAC_KEY_BASE64 %%%%%%%%%%%%%'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/look\slike\sbase64/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG key __CHANGEME__',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'REQUIRE_SOURCE Y',
|
|
'KEY testtest',
|
|
'GPG_REQUIRE_SIG Y', ### additional test coverage
|
|
'GPG_DISABLE_SIG N',
|
|
'GPG_IGNORE_SIG_VERIFY_ERROR N',
|
|
'GPG_DECRYPT_PW __CHANGEME__'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/PW\s.*not\sproperly/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG pw != HMAC key',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'HMAC_KEY testtest',
|
|
'GPG_DECRYPT_PW testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/encryption\spassphrase/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'GPG invalid home dir path',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'HMAC_KEY hmactest',
|
|
'GPG_DECRYPT_PW testtest',
|
|
'GPG_HOME_DIR somedir'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/unable to stat/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid FW_ACCESS_TIMEOUT',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'FW_ACCESS_TIMEOUT 999999999999'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/not\sin\srange/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid ENCRYPTION_MODE',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'ENCRYPTION_MODE invalid'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/Unrecognized.*MODE/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid CMD_EXEC_USER',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_EXEC_USER invalid'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/Unable.*UID/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid CMD_EXEC_GROUP',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'CMD_EXEC_GROUP invalid'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment'
|
|
],
|
|
'positive_output_matches' => [qr/Unable.*GID/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE ${FW_PREFIX}_FORWARD_ACCESS",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_FORWARD_ACCESS invalid"
|
|
],
|
|
'positive_output_matches' => [qr/ACCESS\sspecification/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE ${FW_PREFIX}_DNAT_ACCESS",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_DNAT_ACCESS invalid"
|
|
],
|
|
'positive_output_matches' => [qr/ACCESS\sspecification/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE ${FW_PREFIX}_SNAT_ACCESS",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_SNAT_ACCESS invalid"
|
|
],
|
|
'positive_output_matches' => [qr/ACCESS\sspecification/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE ${FW_PREFIX}_SNAT_TRANSLATE_IP",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y",
|
|
"ENABLE_${FW_PREFIX}_SNAT Y",
|
|
'SNAT_TRANSLATE_IP invalid'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIPv4/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'FORCE_SNAT -> FORCE_NAT/FORWARD_ALL',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/$fwknopdCmd -c $cf{"${fw_conf_prefix}_nat"} -a $cf{'require_force_nat_access'} / .
|
|
"-d $default_digest_file -p $default_pid_file $intf_str --exit-parse-config",
|
|
'positive_output_matches' => [qr/requires either FORCE_NAT or FORWARD_ALL/i],
|
|
'exec_err' => $YES,
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'FORCE_MASQUERADE -> FORCE_NAT/FORWARD_ALL',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'FORCE_MASQUERADE Y'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y;",
|
|
"ENABLE_${FW_PREFIX}_SNAT Y;"
|
|
],
|
|
'positive_output_matches' => [qr/requires either FORCE_NAT or FORWARD_ALL/i],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE ${FW_PREFIX}_MASQUERADE_ACCESS",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_MASQUERADE_ACCESS invalid"
|
|
],
|
|
'positive_output_matches' => [qr/ACCESS\sspecification/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "invalid $FW_TYPE ${FW_PREFIX}_OUTPUT_ACCESS",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
"${FW_PREFIX}_OUTPUT_ACCESS invalid"
|
|
],
|
|
'positive_output_matches' => [qr/ACCESS\sspecification/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'invalid PCAP_LOOP_SLEEP',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'PCAP_LOOP_SLEEP 9999999999999'
|
|
],
|
|
'positive_output_matches' => [qr/not\sin\sthe\srange/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (1)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1/aaaaaaaaaaaaaaaaaaaaa',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIP\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (2)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE aaaaaaaaaaaaaaaaaaaaa',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Error\sparsing.*IP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (3)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 123.123.123.123/255.255.255.258',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/error\sparsing.*IP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (4)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 123.123.123.123/33',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIP\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (5)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1/1234.1.1.1',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/error\sparsing.*IP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (6)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1/255.255.255.0, 2.2.2.2/33, 123.123.123.123/24',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIP\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (7)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1/',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Missing\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (8)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1/0',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid IP mask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE format (9)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1/299.255.255.0',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/error parsing IP mask/],
|
|
},
|
|
|
|
### DESTINATION validation
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (1)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 1.1.1.1/aaaaaaaaaaaaaaaaaaaaaa',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIP\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (2)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION aaaaaaaaaaaaaaaaaaaaaa',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Error\sparsing.*IP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (3)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 123.123.123.123/255.255.255.258',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/error\sparsing.*IP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (4)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 123.123.123.123/33',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIP\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (5)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 1.1.1.1/1234.1.1.1',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/error\sparsing.*IP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (6)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 1.1.1.1/255.255.255.0, 2.2.2.2/33, 123.123.123.123/24',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sIP\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (7)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 1.1.1.1/',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Missing\smask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (8)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 1.1.1.1/0',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid IP mask/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION format (9)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'DESTINATION 1.1.1.1/299.255.255.0',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/error parsing IP mask/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'OPEN_PORTS format (1)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1',
|
|
'OPEN_PORTS tcp',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Parse\serror/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'OPEN_PORTS format (2)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1',
|
|
'OPEN_PORTS icmp/22',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sproto/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'OPEN_PORTS format (3)',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1',
|
|
'OPEN_PORTS tcp/22, udp/53, tcp/12345, udp/123, icmp/1, tcp/23',
|
|
'KEY testtest'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\sproto/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access SOURCE key',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/No\skeys\sfound/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access DESTINATION missing SOURCE',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'DESTINATION 1.1.1.1',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/not\sfind\svalid\sSOURCE/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'missing access DESTINATION key',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE 1.1.1.1',
|
|
'DESTINATION 1.2.3.4',
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/No\skeys\sfound/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => 'access var too long',
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY ' . 'A'x1200
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/Invalid\saccess\sfile\sentry/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_NAT format (1)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_NAT a a'
|
|
],
|
|
'server_conf_file' => [
|
|
'### comment line'
|
|
],
|
|
'positive_output_matches' => [qr/requires\s.*${FW_PREFIX}_FORWARDING/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_NAT format (2)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_NAT a a'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/need.*IP.*PORT/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_NAT format (3)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_NAT 1.2.3.4 999999'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/invalid\sFORCE_NAT\sport/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_NAT format (4)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_NAT 1.2.3.4.9 1234'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/invalid\sFORCE_NAT\sIP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_SNAT format (1)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_SNAT 1.2.3.4.9 1234'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/invalid\sFORCE_SNAT\sIP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_SNAT format (2)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_SNAT a'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/invalid\sFORCE_SNAT\sIP/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_SNAT format (3)",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'FORCE_SNAT a'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING N"
|
|
],
|
|
'positive_output_matches' => [qr/requires.*enabled/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_SNAT + NAT",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'FORCE_SNAT 1.2.3.4'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/requires either FORCE_NAT or FORWARD_ALL/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_SNAT and 0.0.0.0 0",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => "$server_rewrite_conf_files --exit-parse-config",
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'FORCE_SNAT 1.2.3.4',
|
|
'FORWARD_ALL Y'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/FORCE_NAT.*0\.0\.0\.0/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'server',
|
|
'detail' => "$FW_TYPE FORCE_MASQUERADE + NAT",
|
|
'function' => \&server_conf_files,
|
|
'fwknopd_cmdline' => $server_rewrite_conf_files,
|
|
'exec_err' => $YES,
|
|
'server_access_file' => [
|
|
'SOURCE any',
|
|
'KEY testtest',
|
|
'FORCE_MASQUERADE Y'
|
|
],
|
|
'server_conf_file' => [
|
|
"ENABLE_${FW_PREFIX}_FORWARDING Y"
|
|
],
|
|
'positive_output_matches' => [qr/requires either FORCE_NAT or FORWARD_ALL/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode CBC',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode CBC",
|
|
'positive_output_matches' => [qr/Encryption\sMode\:\s.*CBC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode ECB',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode ECB",
|
|
'positive_output_matches' => [qr/Encryption\sMode\:\s.*ECB/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode CFB',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode CFB",
|
|
'positive_output_matches' => [qr/Encryption\sMode\:\s.*CFB/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode PCBC (unsupported)',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode PCBC",
|
|
'positive_output_matches' => [qr/Invalid\sencryption\smode:\sPCBC/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode OFB',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode OFB",
|
|
'positive_output_matches' => [qr/Encryption\sMode\:\s.*OFB/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode CTR',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode CTR",
|
|
'positive_output_matches' => [qr/Encryption\sMode\:\s.*CTR/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode Asymmetric',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode \"Asymmetric\"",
|
|
'positive_output_matches' => [qr/Must\sspecify\sGPG\srecipient/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'encryption mode legacy',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode legacy",
|
|
'positive_output_matches' => [qr/Encryption\sMode\:\s.*legacy/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'bad encryption mode',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --test --encryption-mode badmode",
|
|
'positive_output_matches' => [qr/Invalid\sencryption\smode:\sbadmode/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw bad file descriptor (1)',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args_no_get_key . " --test --fd -1",
|
|
'positive_output_matches' => [qr/Value\s.*out\sof\srange/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw bad file descriptor (2)',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args_no_get_key . " --test --fd 100",
|
|
'positive_output_matches' => [qr/Bad\sfile\sdescriptor/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 PW_BS_CHAR',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e 'print "test\x08test"' |/
|
|
. $default_client_args_no_get_key . " --test --fd 0",
|
|
'positive_output_matches' => [qr/FKO\sVersion/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 PW_BREAK_CHAR',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e 'print "test\x03test"' |/
|
|
. $default_client_args_no_get_key . " --test --fd 0",
|
|
'positive_output_matches' => [qr/FKO\sVersion/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 PW_LF_CHAR',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e 'print "test\x0atest"' |/
|
|
. $default_client_args_no_get_key . " --test --fd 0",
|
|
'positive_output_matches' => [qr/FKO\sVersion/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 PW_CR_CHAR',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e 'print "test\x0dtest"' |/
|
|
. $default_client_args_no_get_key . " --test --fd 0",
|
|
'positive_output_matches' => [qr/FKO\sVersion/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 PW_CLEAR_CHAR',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e 'print "test\x15test"' |/
|
|
. $default_client_args_no_get_key . " --test --fd 0",
|
|
'positive_output_matches' => [qr/FKO\sVersion/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 HMAC key',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/echo "hmackey" |/
|
|
. "$default_client_args_no_get_key --use-hmac --key-rijndael enckey --test --fd 0",
|
|
'positive_output_matches' => [qr/HMAC.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 HMAC key long',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e 'print "A"x1500' |/
|
|
. "$default_client_args_no_get_key --use-hmac --key-rijndael enckey --test --fd 0",
|
|
'positive_output_matches' => [qr/HMAC.*SHA256/],
|
|
},
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => 'pw fd 0 HMAC key NULL',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => qq/perl -e '' |/
|
|
. "$default_client_args_no_get_key --use-hmac --key-rijndael enckey --test --fd 0",
|
|
'positive_output_matches' => [qr/HMAC.*SHA256/],
|
|
},
|
|
|
|
{
|
|
'category' => 'basic operations',
|
|
'subcategory' => 'client',
|
|
'detail' => '--stanza-list',
|
|
'function' => \&generic_exec,
|
|
'cmdline' => $default_client_args . " --stanza-list --rc-file $cf{'rc_stanza_list'}",
|
|
'positive_output_matches' => [qr/The\sfollowing\sstanzas\sare\sconfigured/i, qr/stanza_1/, qr/stanza_2/],
|
|
'negative_output_matches' => [qr/default/],
|
|
},
|
|
);
|