GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-08-08 09:21:48 +08:00
Code Issues Packages Projects Releases Wiki Activity
4,238 Commits 33 Branches 91 Tags
29dd18ddc52d6683489f0cde203eb2d43b2d8296
Commit Graph
48 Commits
Author SHA1 Message Date
Nikos Mavrogiannopoulos 29dd18ddc5 tests: add SIGKILL fallback in cleanup_client_server 
Ensure that ocserv is killed within bounded time by falling
back to a SIGKILL if ocserv does not stop on time.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2026-06-11 15:40:37 +02:00
Dimitri Papadopoulos 34be9e368e tests: which → command -v 
Use `command -v` instead of `which` because:
* It's built into the shell, avoiding an external dependency on the
  `which` package on Fedora 44.
* It works across all POSIX-compliant shells.
* It's standard across Linux distributions. For example, Fedora 44
  lacks the `which` package by default.

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
 2026-05-31 14:17:33 +02:00
Grigory Trenin 61f013ae3a pam: add 'service' sub-option to auth directive 
This allows users to specify a custom PAM service name, enabling
per-virtual-host PAM stacks.For example:
auth = "pam[service=vpn1,gid-min=1000]"

Resolves: #718

Signed-off-by: Grigory Trenin <grigory.trenin@gmail.com>
 2026-05-08 21:00:07 -04:00
Nikos Mavrogiannopoulos 5148c723cb tests: fix flaky radius tests by waiting for server readiness 
All six radius tests used a fixed sleep 4 after starting radiusd and
ocserv.  On slow or ASAN-instrumented hosts (CentOS 10 CI) this is
insufficient: freeradius with -xx debug logging takes longer than 4
seconds to load its modules, and even after binding UDP 1812 it continues
initializing its user database before it can process auth requests.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2026-04-25 17:20:38 +02:00
Nikos Mavrogiannopoulos 1b8f7f8ede tests: introduced helper to have uniform termination of client and server 
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2026-03-22 12:29:59 +01:00
Nikos Mavrogiannopoulos 97ad7e479a tests: explicitly specify the path (srcdir vs builddir) of config files 
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2026-03-20 20:47:35 +01:00
Dimitri Papadopoulos 25b85eadb3 This file is part of GnuTLS → ocserv. 
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
 2023-02-23 21:51:37 +01:00
Dimitri Papadopoulos f28669bf60 Remove spaces 
* Remove trailing spaces at end-of-line
* Remove blank lines at end-of-file

Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>
 2022-11-28 11:22:33 +01:00
Dimitri Papadopoulos a58ff2534f chmod +x autogen.sh 
Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>
 2021-12-22 19:17:58 +01:00
Nikos Mavrogiannopoulos 13f59eebbd tests: increase verbosity on coverage runs 
This includes the debugging output into our tests.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2020-12-19 14:15:56 +01:00
Nikos Mavrogiannopoulos 70150a856b tests: drain-server-fail: make sure it runs only when root 
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2020-12-06 22:14:38 +01:00
Nikos Mavrogiannopoulos b2c0c6c1cf tests: replaced explicit ports with random assignment 
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2020-08-09 13:14:22 +02:00
Nikos Mavrogiannopoulos f814cf851b tests: added session resumption test 
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2020-08-09 11:54:04 +02:00
Nikos Mavrogiannopoulos 0ecef93423 .gitlab-ci.yml: reenable address sanitizer 
This disables all the tests that use LD_PRELOAD, and thus limits
the test suite on the tests that are run as root.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2020-08-05 23:08:43 +02:00
William Dauchy f4c7d41d14 add basic namespace support for listen address 
- this patch adds `listen-netns` parameter
- when set the listening socket will be created in the given namespace

it allows to properly segregate your traffic:
- do the backend traffic in the root namespace
- receive the VIP traffic in a given namespace

All this patch is widely inspired by haproxy implementation which allows
to bind each IP in a given namespace.

Resolves: #316

Signed-off-by: William Dauchy <w.dauchy@criteo.com>
 2020-07-13 18:11:30 +02:00
Nikos Mavrogiannopoulos fdb80bb23e tests: detect openconnect's path and fail if not found 
Resolves: #311

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
 2020-06-11 22:26:33 +02:00
Nikos MavrogiannopoulosandNikos Mavrogiannopoulos fd2bd42cb2 .gitlab-ci.yml: corrected kerberos tests 
This also corrects the kerberos test script environment
to enable running the test.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2020-04-10 23:06:07 +02:00
Nikos Mavrogiannopoulos 5e817d3d60 tests: added test to test match-tls-dtls-ciphers config option 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2020-03-12 17:01:01 +01:00
Nikos Mavrogiannopoulos ea3f6900c1 common.sh: print message when script cannot run 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2020-02-07 17:12:59 +01:00
Nikos Mavrogiannopoulos c9e907c841 tests: replaced docker-based kerberos test case with one that runs in CI 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2019-11-17 14:51:21 +01:00
Nikos Mavrogiannopoulos ea845a57fc tests: clean-up pam server initiation 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2019-11-17 11:10:19 +01:00
Nikos Mavrogiannopoulos 27c83dcf42 tests: consistently disable isolate-workers in tests 
That is to prevent coverage reporting in tests.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2019-01-20 06:43:47 +01:00
Nikos Mavrogiannopoulos b181f20a2e tests: added functionality test for config-per-group 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-11-18 21:06:22 +01:00
Nikos Mavrogiannopoulos 265e30dab7 tests: full-test was moved into traffic test 
The new traffic test only requires namespaces and no docker.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-05 20:06:27 +02:00
Nikos Mavrogiannopoulos 86fe0fc457 tests: added check with haproxy connection 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-04 07:22:49 +02:00
Nikos Mavrogiannopoulos 63b7e81e87 tests: added test with proxy-protocol 
That tests operation under haproxy with proxy-protocol without docker.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-01 13:30:47 +02:00
Nikos Mavrogiannopoulos 5d0205332d tests: introduced test program to check basic vhost functionality 
This checks whether connecting to different virtual hosts
with different authentication methods works.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-03-06 20:42:33 +01:00
Nikos Mavrogiannopoulos 00c6f566cb tests: introduced test with OTP-password and certificate auth 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 14:38:19 +01:00
Nikos Mavrogiannopoulos 6bf1341c21 .gitlab-ci.yml: root tests are run on CI systems 
Because these tests can only be run in-tree, the CI builds
were switched to be in-tree, except for FreeBSD build which
now runs out-of-tree.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-09-09 11:35:14 +02:00
Nikos Mavrogiannopoulos b3cbfbbcd5 tests: Added check for certificate alternative name checking 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-01-28 15:23:17 +01:00
Mike MillerandNikos Mavrogiannopoulos e69a07ed6e tests: allow running tests with alternate OpenConnect 
Allow $OPENCONNECT in the caller's environment to override the default
openconnect system installation.

Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-23 08:04:59 +01:00
Mike Miller 9f0776e6ae tests: ensure unique temporary config file names 
Some unit tests share the same ocserv config file. Ensure that the file
written and used by each test script has a unique name.

Resolves #83

Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-15 16:44:14 -08:00
Nikos Mavrogiannopoulos e12d2e6818 tests: made pam check independent of builddir 2016-06-29 10:05:00 +02:00
Nikos Mavrogiannopoulos ae3c20c3ed tests: pam tests were converted to use pam-wrapper 
This allows running the PAM tests without requiring root access
 2016-06-25 23:05:18 +02:00
Nikos Mavrogiannopoulos f3a182dbdf tests: moved config files to data/ 2016-06-17 11:54:03 +02:00
Nikos Mavrogiannopoulos 5c88ee7715 tests: moved all certificates and keys in certs/ 2016-06-17 11:53:50 +02:00
Nikos Mavrogiannopoulos 9a125c3aba tests: update tests to include the running username/group 
That removes the requirement to keep a uid_wrapper specific
hack in check_upeer_id().
 2016-04-15 11:17:35 +02:00
Nikos Mavrogiannopoulos d9fc3b465a tests: check for sever exit in test-cert 2015-11-28 20:25:28 +01:00
Nikos Mavrogiannopoulos e91a56117b tests: modified cwrap tests to run from different builddir 2015-11-19 14:30:48 +01:00
Nikos Mavrogiannopoulos 345a752676 tests: converted part of the test suite to run with cwrap 
That allows several tests to run as non-root.
 2015-11-19 10:44:34 +01:00
Nikos Mavrogiannopoulos eba415def6 tests: openconnect binary is now set in variable 2015-03-29 19:38:38 +02:00
Nikos Mavrogiannopoulos 5ef450086d tests: Increased the server start wait time 2014-06-26 13:46:31 +02:00
Nikos Mavrogiannopoulos c094a94d19 Added test for CRL file support. 2014-04-02 12:56:56 +02:00
Nikos Mavrogiannopoulos a3ecb5b91f simplified and corrected test execution 2014-04-01 18:35:01 +02:00
Nikos Mavrogiannopoulos 828814862b Added stress test 2014-02-15 09:53:57 +01:00
Nikos Mavrogiannopoulos d7bee06bff relicensed after all authors agreed. 2013-11-19 18:19:46 +01:00
Nikos Mavrogiannopoulos bd1f6f411a moved common tests to common.sh 2013-07-07 21:16:28 +02:00
Nikos Mavrogiannopoulos 3e6e90f734 Added test suite that depends on openconnect. 2013-07-06 17:11:26 +02:00