[src/trunk]: src/tests/net/ipsec Test TCP communications over IPsec transport...

[ozaki-r <ozaki-r%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/54a3ec1f97a6
branches:  trunk
changeset: 824318:54a3ec1f97a6
user:      ozaki-r <ozaki-r%NetBSD.org@localhost>
date:      Thu Jun 01 03:56:47 2017 +0000

description:
Test TCP communications over IPsec transport mode with ESP or AH

This tests SP caches of PCB.

diffstat:

 tests/net/ipsec/t_ipsec_misc.sh |  70 +++++++++++++++++++++++++++++++++++++---
 1 files changed, 64 insertions(+), 6 deletions(-)

diffs (133 lines):

diff -r 601cf4904fed -r 54a3ec1f97a6 tests/net/ipsec/t_ipsec_misc.sh
--- a/tests/net/ipsec/t_ipsec_misc.sh   Thu Jun 01 03:51:47 2017 +0000
+++ b/tests/net/ipsec/t_ipsec_misc.sh   Thu Jun 01 03:56:47 2017 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: t_ipsec_misc.sh,v 1.5 2017/06/01 03:51:47 ozaki-r Exp $
+#      $NetBSD: t_ipsec_misc.sh,v 1.6 2017/06/01 03:56:47 ozaki-r Exp $
 #
 # Copyright (c) 2017 Internet Initiative Japan Inc.
 # All rights reserved.
@@ -344,8 +344,13 @@
 
 test_tcp_ipv4()
 {
+       local proto=$1
+       local algo=$2
        local ip_local=10.0.0.1
        local ip_peer=10.0.0.2
+       local algo_args="$(generate_algo_args $proto $algo)"
+       local proto_cap=$(echo $proto | tr 'a-z' 'A-Z')
+       local outfile=./out
 
        rump_server_crypto_start $SOCK_LOCAL netipsec
        rump_server_crypto_start $SOCK_PEER netipsec
@@ -360,13 +365,36 @@
        atf_check -s exit:0 rump.ifconfig shmif0 $ip_peer/24
        atf_check -s exit:0 rump.ifconfig -w 10
 
+       if [ $proto != none ]; then
+               setup_sasp $proto "$algo_args" $ip_local $ip_peer 100
+       fi
+
+       extract_new_packets $BUS > $outfile
+
        test_tcp ipv4 $ip_local $ip_peer
+
+       extract_new_packets $BUS > $outfile
+       $DEBUG && cat $outfile
+
+       if [ $proto != none ]; then
+               atf_check -s exit:0 \
+                   -o match:"$ip_local > $ip_peer: $proto_cap" \
+                   cat $outfile
+               atf_check -s exit:0 \
+                   -o match:"$ip_peer > $ip_local: $proto_cap" \
+                   cat $outfile
+       fi
 }
 
 test_tcp_ipv6()
 {
+       local proto=$1
+       local algo=$2
        local ip_local=fd00::1
        local ip_peer=fd00::2
+       local algo_args="$(generate_algo_args $proto $algo)"
+       local proto_cap=$(echo $proto | tr 'a-z' 'A-Z')
+       local outfile=./out
 
        rump_server_crypto_start $SOCK_LOCAL netinet6 netipsec
        rump_server_crypto_start $SOCK_PEER netinet6 netipsec
@@ -381,16 +409,42 @@
        atf_check -s exit:0 rump.ifconfig shmif0 inet6 $ip_peer
        atf_check -s exit:0 rump.ifconfig -w 10
 
+       if [ $proto != none ]; then
+               setup_sasp $proto "$algo_args" $ip_local $ip_peer 100
+       fi
+
+       extract_new_packets $BUS > $outfile
+
        test_tcp ipv6 $ip_local $ip_peer
+
+       extract_new_packets $BUS > $outfile
+       $DEBUG && cat $outfile
+
+       if [ $proto != none ]; then
+               atf_check -s exit:0 \
+                   -o match:"$ip_local > $ip_peer: $proto_cap" \
+                   cat $outfile
+               atf_check -s exit:0 \
+                   -o match:"$ip_peer > $ip_local: $proto_cap" \
+                   cat $outfile
+       fi
 }
 
 add_test_tcp()
 {
        local ipproto=$1
+       local proto=$2
+       local algo=$3
+       local _algo=$(echo $algo | sed 's/-//g')
        local name= desc=
 
-       name="ipsec_tcp_${ipproto}"
-       desc="Tests of TCP with IPsec enabled ($ipproto)"
+       if [ $proto = none ]; then
+               desc="Tests of TCP with IPsec enabled ($ipproto)"
+               name="ipsec_tcp_${ipproto}_${proto}"
+       else
+               desc="Tests of TCP with IPsec ($ipproto) $proto $algo"
+               name="ipsec_tcp_${ipproto}_${proto}_${_algo}"
+       fi
 
        atf_test_case ${name} cleanup
        eval "                                                          \
@@ -399,7 +453,7 @@
                atf_set \"require.progs\" \"rump_server\" \"setkey\";   \
            };                                                          \
            ${name}_body() {                                            \
-               test_tcp_${ipproto};                                    \
+               test_tcp_${ipproto} $proto $algo;                       \
                rump_server_destroy_ifaces;                             \
            };                                                          \
            ${name}_cleanup() {                                         \
@@ -417,12 +471,16 @@
        for algo in $ESP_ENCRYPTION_ALGORITHMS_MINIMUM; do
                add_test_lifetime ipv4 esp $algo
                add_test_lifetime ipv6 esp $algo
+               add_test_tcp ipv4 esp $algo
+               add_test_tcp ipv6 esp $algo
        done
        for algo in $AH_AUTHENTICATION_ALGORITHMS_MINIMUM; do
                add_test_lifetime ipv4 ah $algo
                add_test_lifetime ipv6 ah $algo
+               add_test_tcp ipv4 ah $algo
+               add_test_tcp ipv6 ah $algo
        done
 
-       add_test_tcp ipv4
-       add_test_tcp ipv6
+       add_test_tcp ipv4 none
+       add_test_tcp ipv6 none
 }