Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/tests/net/ipsec Fix incomplete SP setups
details: https://anonhg.NetBSD.org/src/rev/5043fa8c9535
branches: trunk
changeset: 827204:5043fa8c9535
user: ozaki-r <ozaki-r%NetBSD.org@localhost>
date: Fri Oct 20 03:43:51 2017 +0000
description:
Fix incomplete SP setups
diffstat:
tests/net/ipsec/common.sh | 5 ++++-
tests/net/ipsec/t_ipsec_misc.sh | 4 +++-
2 files changed, 7 insertions(+), 2 deletions(-)
diffs (44 lines):
diff -r 6f119bb703dc -r 5043fa8c9535 tests/net/ipsec/common.sh
--- a/tests/net/ipsec/common.sh Fri Oct 20 03:42:53 2017 +0000
+++ b/tests/net/ipsec/common.sh Fri Oct 20 03:43:51 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: common.sh,v 1.6 2017/08/08 02:27:03 ozaki-r Exp $
+# $NetBSD: common.sh,v 1.7 2017/10/20 03:43:51 ozaki-r Exp $
#
# Copyright (c) 2017 Internet Initiative Japan Inc.
# All rights reserved.
@@ -67,6 +67,9 @@
atf_check -s exit:0 \
-o match:"$local_addr\[any\] $remote_addr\[any\] 255\(reserved\)" \
$HIJACKING setkey -D -P
+ atf_check -s exit:0 \
+ -o match:"$remote_addr\[any\] $local_addr\[any\] 255\(reserved\)" \
+ $HIJACKING setkey -D -P
# TODO: more detail checks
}
diff -r 6f119bb703dc -r 5043fa8c9535 tests/net/ipsec/t_ipsec_misc.sh
--- a/tests/net/ipsec/t_ipsec_misc.sh Fri Oct 20 03:42:53 2017 +0000
+++ b/tests/net/ipsec/t_ipsec_misc.sh Fri Oct 20 03:43:51 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: t_ipsec_misc.sh,v 1.18 2017/08/03 03:16:27 ozaki-r Exp $
+# $NetBSD: t_ipsec_misc.sh,v 1.19 2017/10/20 03:43:51 ozaki-r Exp $
#
# Copyright (c) 2017 Internet Initiative Japan Inc.
# All rights reserved.
@@ -625,6 +625,7 @@
export RUMP_SERVER=$SOCK_LOCAL
cat > $tmpfile <<-EOF
spdadd $ip_local $ip_peer any -P out ipsec $proto/transport//require;
+ spdadd $ip_peer $ip_local any -P in ipsec $proto/transport//require;
EOF
$DEBUG && cat $tmpfile
atf_check -s exit:0 -o empty $HIJACKING setkey -c < $tmpfile
@@ -633,6 +634,7 @@
export RUMP_SERVER=$SOCK_PEER
cat > $tmpfile <<-EOF
spdadd $ip_peer $ip_local any -P out ipsec $proto/transport//require;
+ spdadd $ip_local $ip_peer any -P in ipsec $proto/transport//require;
EOF
$DEBUG && cat $tmpfile
atf_check -s exit:0 -o empty $HIJACKING setkey -c < $tmpfile
Home |
Main Index |
Thread Index |
Old Index