aboutsummaryrefslogtreecommitdiffstats
path: root/src/libcharon/tests
Commit message (Collapse)AuthorAgeFilesLines
* unit-tests: Add tests for expires after CHILD_SA rekeyingTobias Brunner2016-06-171-0/+129
|
* unit-tests: Add test for CHILD_SA rekey if a retry due to an ↵Tobias Brunner2016-06-171-0/+143
| | | | INVALID_KE_PAYLOAD is delayed
* unit-tests: Add test for collision between IKE_SA rekey and CHILD_SA creationTobias Brunner2016-06-173-0/+108
|
* unit-tests: Add tests for IKE rekeying if INVALID_KE_PAYLOAD notifies are ↵Tobias Brunner2016-06-171-0/+470
| | | | received
* proposal: Handle MODP_NONE in both directions when selecting proposalsTobias Brunner2016-06-173-0/+83
|
* unit-tests: Add test for rekey collision if one CREATE_CHILD_SA response is ↵Tobias Brunner2016-06-171-0/+221
| | | | delayed
* unit-tests: Add tests for IKE_SA rekeying if collision is not detected by ↵Tobias Brunner2016-06-171-0/+340
| | | | one peer
* unit-tests: Add tests for IKE/CHILD delete collisionsTobias Brunner2016-06-171-0/+165
|
* unit-tests: Add tests for IKE/CHILD rekey collisionsTobias Brunner2016-06-171-0/+170
|
* unit-tests: Add tests for collisions between IKE_SA rekeying and deletionTobias Brunner2016-06-171-0/+174
|
* unit-tests: Add tests for IKE SA deletionTobias Brunner2016-06-173-0/+139
|
* unit-tests: Only deliver messages to the SA they are addressed toTobias Brunner2016-06-171-4/+12
|
* unit-tests: Add test for simple IKE rekey collisionTobias Brunner2016-06-171-5/+171
|
* ikev2: Add a new state to track rekeyed IKE_SAsTobias Brunner2016-06-171-1/+1
| | | | | | | | | This makes handling such IKE_SAs more specifically compared to keeping them in state IKE_CONNECTING or IKE_ESTABLISHED (which we did when we lost a collision - even triggering the ike_updown event), or using IKE_REKEYING for them, which would also be ambiguous. For instance, we can now reject anything but DELETES for such SAs.
* unit-tests: Add tests for IKE_SA rekeyingTobias Brunner2016-06-173-0/+111
|
* unit-tests: Add asserts against IKE_SAsTobias Brunner2016-06-171-0/+45
|
* unit-tests: Make sure to flush the IKE_SA manager before destroying the senderTobias Brunner2016-06-171-1/+3
| | | | | | | | | | As the static plugin that creates and destroys the default sender was not initialized because of the missing socket the daemon won't destroy our sender. Test cases will eventually have to flush the IKE_SA manager to satisfy the leak detective. However, in case of a test failure and if there are IKE_SAs in the manager the daemon will flush the SAs when deinitializing, which will cause deletes to get sent. This crashes if the sender is already destroyed.
* unit-tests: Return status from process_message()Tobias Brunner2016-06-172-4/+8
|
* unit-tests: Use wrapper for add_listener in bus_t related assertsTobias Brunner2016-06-171-2/+2
|
* unit-tests: Provide a wrapper around bus_t::add_listener and unregister them ↵Tobias Brunner2016-06-172-0/+32
| | | | | | | | during cleanup In case listeners on the stack are triggered while cleaning up after a test failed (e.g. via ike_sa_manager_t::flush) remaining listeners defined on the stack would cause a segmentation fault.
* unit-tests: Add tests where a peer is not aware of a CHILD_SA rekey collisionTobias Brunner2016-06-171-1/+354
|
* unit-tests: Test for rekeying if INVALID_KE_PAYLOAD notifies are receivedTobias Brunner2016-06-171-0/+253
|
* unit-tests: Make IKE and ESP proposals configurableTobias Brunner2016-06-174-44/+116
|
* unit-tests: Add tests for CHILD_SA rekeying/deletion collisionsTobias Brunner2016-06-171-1/+288
|
* unit-tests: Add asserts against job schedulingTobias Brunner2016-06-172-0/+60
|
* ikev2: Use CHILD_REKEYED for replaced CHILD_SAs after rekeyingTobias Brunner2016-06-171-6/+5
| | | | This allows handling collisions better, in particular with deletions.
* unit-tests: Add asserts against task queues of IKE_SAsTobias Brunner2016-06-171-0/+32
|
* unit-tests: Add unit tests for basic CHILD_SA rekeyingTobias Brunner2016-06-173-0/+237
|
* unit-tests: Add asserts against ike|child_rekey hooksTobias Brunner2016-06-172-0/+82
|
* unit-tests: Match in and outbound SPIs in SA assertsTobias Brunner2016-06-171-2/+15
| | | | Since we use unique sequential SPIs that should be OK.
* unit-tests: Register nonce generator and make first nonce byte configurableTobias Brunner2016-06-172-1/+19
|
* unit-tests: Add mock nonce generatorTobias Brunner2016-06-173-0/+129
| | | | | We don't make the full nonces configurable but only the first byte, which should be enough to force a nonce to be smaller than others.
* unit-tests: Make message asserts more flexibleTobias Brunner2016-06-172-26/+106
|
* unit-tests: Add another CHILD_SA delete collisionTobias Brunner2016-06-171-1/+56
|
* unit-tests: Register mock DH implementation as static plugin featureTobias Brunner2016-06-171-0/+11
|
* unit-tests: Add mock DH implementation that's basically a noopTobias Brunner2016-06-173-0/+125
| | | | | If the openssl plugin is built DH isn't that much of an overhead as ecp256 is used, but the default MODP group is now modp3072.
* unit-tests: Make IKE SPIs predictableTobias Brunner2016-06-171-0/+14
|
* unit-tests: Call methods on IKE_SAs in their contextTobias Brunner2016-06-173-9/+18
|
* unit-tests: Add a unit test for CHILD_SA DELETE collisionsTobias Brunner2016-06-173-0/+149
|
* unit-tests: Add asserts against hooks on listener_t and messages captured thereTobias Brunner2016-06-173-0/+364
|
* unit-tests: Add asserts against SAs (e.g. their states)Tobias Brunner2016-06-172-0/+56
|
* unit-tests: Add separate test runner to test IKEv2 exchangesTobias Brunner2016-06-173-4/+100
| | | | This allows proper initialization of the daemon and the helper object.
* unit-tests: Add helper class/object to test IKE exchangesTobias Brunner2016-06-173-0/+331
|
* unit-tests: Add mock kernel_ipsec_t implementation for unit testsTobias Brunner2016-06-173-0/+165
| | | | Provides predictable sequential SPIs.
* unit-tests: Add mock sender_t implementation for unit testingTobias Brunner2016-06-174-0/+153
| | | | | This allows to retrieve packets sent by an IKE_SA and pass it to another IKE_SA directly via process_message().
* unit-tests: Don't unload plugins before calling libcharon_deinit()Tobias Brunner2016-06-171-3/+0
| | | | | | | libcharon_deinit() already calls all the functions we called manually. Unloading the plugins will not work if charon->initialize() is called as charon's static plugin features would already be unloaded before the destroyed members are accessed in destroy() to flush them.
* Use standard unsigned integer typesAndreas Steffen2016-03-241-4/+4
|
* libhydra: Remove empty unused libraryTobias Brunner2016-03-032-5/+0
|
* ike-cfg: Add unit tests for ike_cfg_get_family() helperTobias Brunner2015-07-273-0/+120
|
* unit-tests: Add a IKEv2 message encryption test caseMartin Willi2015-07-123-0/+140
| | | | | It uses the ChaCha20Poly1305 test vectors from draft-ietf-ipsecme-chacha20-poly1305-06.
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-03 18:35:35 +0000