fwknop

Files

Michael Rash 7a1bdea514 [server] fix 'Use of untrusted string value' bug found by Coverity

This commit changes iptables policy parsing to re-use rule_exists() for fwknop
jump rule detection instead of using sscanf() against iptables policy list
output.  Also, fwknop jump rules are now deleted from iptables policies in a
loop to ensure all are removed even if there are duplicates (even though this
should not happen under normal circumstances anyway).

2013-06-09 14:28:17 -04:00

conf

[server] fix 'Use of untrusted string value' bug found by Coverity

2013-06-09 14:28:17 -04:00

fko-wrapper

fko-wrapper update to print fko_errstr() text, and to have one successful HMAC cycle

2013-06-03 20:54:40 -04:00

fuzzing

[test suite] updated fuzzing tests to allow usernames with '.' chars

2012-12-08 20:58:17 -05:00

test-coverage

updated untested function list for Linux systems

2013-02-12 22:18:16 -05:00

tests

[server] fix 'Use of untrusted string value' bug found by Coverity

2013-06-09 14:28:17 -04:00

fko-python.py

[test suite] added python->C HMAC test

2013-04-08 20:45:14 -04:00

hardening-check

added stack protection detection for OpenBSD systems

2011-10-28 22:59:52 -04:00

local_spa.key

added local_spa.key file

2011-12-05 22:20:39 -05:00

README

added run-test-suite.sh LD_LIBRARY_PATH wrapper

2012-11-03 16:50:26 -04:00

run-test-suite.sh

added run-test-suite.sh LD_LIBRARY_PATH wrapper

2012-11-03 16:50:26 -04:00

test-fwknop.pl

[server] fix 'Use of untrusted string value' bug found by Coverity

2013-06-09 14:28:17 -04:00

README

This directory contains the fwknop test suite.  After compiling the fwknop
sources in the parent directory of test/ the test suite can be executed.  One
of the most comprehensive ways of executing the test suite is as follows:

# ./run-test-suite.sh --enable-all

This mode enables IP resolution tests, so you will need Internet access in this
case.  If this is not possible or desirable, then another comprehensive testing
mode can be achieved with:

# ./run-test-suite.sh --enable-recompile --enable-perl-module-checks --enable-distcheck

Additional detail on the test suite (including --diff and --enable-valgrind
modes) may be found in the fwknop tutorial available here:

http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#3.5