GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 08:46:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
2,975 Commits 19 Branches 88 Tags
432c12dcce9fd0cee3eb23c39d9a05a1299388ca
Commit Graph

328 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
432c12dcce tests: added test to unit test the maintenance cycle 
This allows to catch issues like crashes late in the server
operation as in #149

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-15 09:25:51 +02:00
Nikos Mavrogiannopoulos
0bb085de4a tests: pam-test was restricted to pam_matrix 
valgrind and asan were indicating issues with pam_oath, so
avoid using it in the testsuite.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-14 18:36:03 +02:00
Nikos Mavrogiannopoulos
9af953383e tests: properly handle memory in cfg_parse_ports() unit test 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-14 14:23:21 +02:00
Nikos Mavrogiannopoulos
90b3c439fb tests: server-cert-rsa-pss moved to xfail set 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-14 14:22:46 +02:00
Nikos Mavrogiannopoulos
158b099c9f tests: added test with compression enabled 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-06 06:53:27 +02:00
Nikos Mavrogiannopoulos
265e30dab7 tests: full-test was moved into traffic test 
The new traffic test only requires namespaces and no docker.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-05 20:06:27 +02:00
Nikos Mavrogiannopoulos
490a201826 haproxy-connect: split into lib 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-05 18:59:41 +02:00
Nikos Mavrogiannopoulos
86fe0fc457 tests: added check with haproxy connection 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-04 07:22:49 +02:00
Nikos Mavrogiannopoulos
63b7e81e87 tests: added test with proxy-protocol 
That tests operation under haproxy with proxy-protocol without docker.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-04-01 13:30:47 +02:00
Nikos Mavrogiannopoulos
0de68ef4b1 tests: added reproducer for #141 
This tests whether more than 128 options can be read in
routes or dns fields.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-03-21 12:28:24 +01:00
Nikos Mavrogiannopoulos
5d0205332d tests: introduced test program to check basic vhost functionality 
This checks whether connecting to different virtual hosts
with different authentication methods works.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-03-06 20:42:33 +01:00
Nikos Mavrogiannopoulos
ba6921ed9a Introduced the notion of virtual hosts 
This provides virtualized server configurations which take
effect after client connection when client hello is received.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-03-06 20:42:31 +01:00
Nikos Mavrogiannopoulos
274415d050 tests: use the --pid-file and -p options in ocserv 
This allows detecting issues like in #143 where these
two options regressed.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-03-01 19:18:54 +01:00
Nikos Mavrogiannopoulos
15fd4c9fbb tests: introduced tests with gssapi falling back to pass or certs 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 16:31:55 +01:00
Nikos Mavrogiannopoulos
4ecfed7ed0 tests: added check cert or pass auth 
This is the similar to the test case (test-pass-opt-cert) of pass or cert,
but in that case the certificate method is set as primary.

Relates #108

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 16:03:50 +01:00
Nikos Mavrogiannopoulos
30d4b4e677 test-pass-opt-cert: modified not to require root access 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 16:03:50 +01:00
Nikos Mavrogiannopoulos
86ae99864b tests: check whether ocserv is build with oath support prior to running otp tests 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 16:03:33 +01:00
Nikos Mavrogiannopoulos
66f9f97d1d test: replaced docker otp-test with cwrap test-otp 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 16:00:09 +01:00
Nikos Mavrogiannopoulos
00c6f566cb tests: introduced test with OTP-password and certificate auth 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-02-25 14:38:19 +01:00
Daniel Lenski
fbdf8f875e Make escape_url() percent-escape fewer characters and escape ' ' as '+' 
Per RFC 3986, neither ASCII alphanumeric characters, nor any of '-', '_',
'.', '~', need to be escaped anywhere in a URL or query string.
 2018-01-13 13:11:33 -08:00
Daniel Lenski
38ebf44620 tests for unescaping decimal HTML escapes and '+' in URLs 2018-01-13 12:56:59 -08:00
Nikos Mavrogiannopoulos
7a19296119 tests: updated for increase in slack time 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2018-01-06 08:55:02 +01:00
Nikos Mavrogiannopoulos
705b65d168 tests: updated to account for changes in cookie invalidation 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-12-11 08:26:48 +01:00
Frank Huang
f10c5bc73e Update ocpasswd-test 
Signed-off-by: Frank Huang <chuang213@gmail.com>
 2017-10-09 21:42:30 +02:00
Nikos Mavrogiannopoulos
a779b18a81 tests: test-pass-script: only run when openconnect supports --local-hostname 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-09-09 11:49:57 +02:00
Nikos Mavrogiannopoulos
6bf1341c21 .gitlab-ci.yml: root tests are run on CI systems 
Because these tests can only be run in-tree, the CI builds
were switched to be in-tree, except for FreeBSD build which
now runs out-of-tree.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-09-09 11:35:14 +02:00
Nikos Mavrogiannopoulos
b5d77da7f4 Separate root from docker tests 
This allows running the root tests under CI, even if the
docker tests (which cannot be run) are not.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-09-09 11:27:35 +02:00
Nikos Mavrogiannopoulos
8eafacf2a9 tests: test-gssapi is now run as non-root 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-09-09 10:51:42 +02:00
Nikos Mavrogiannopoulos
834326fe70 tests: provide more verbose output on test-pam 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-09-08 11:29:31 +02:00
Nikos Mavrogiannopoulos
077e16e36d tests: check server functionality with Ed25519/RSA-PSS certs 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-08-23 12:00:15 +02:00
Nikos Mavrogiannopoulos
5d74492a59 tests: verify correct operation with locked account 
That checks whether connecting to a locked account will have
unexpected effects (e.g., login allowed).

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-08-23 09:26:58 +02:00
Nikos Mavrogiannopoulos
37f8ebc8c9 tests: added unit test for proxy protocol v1 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-03-28 08:15:35 +02:00
Nikos Mavrogiannopoulos
0c18e122e6 tests: added check for proxy protocol v1 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-03-28 08:11:53 +02:00
Nikos Mavrogiannopoulos
83bea71e38 tests: added unit test for cstp_recv_nb() 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-03-24 20:07:47 +01:00
Nikos Mavrogiannopoulos
50c551b56e tests: kerberos tests use F25 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-03-23 09:33:14 +01:00
Nikos Mavrogiannopoulos
8e66136a1b tests: test-user-config: fixed check for 401 error 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-03-23 09:28:43 +01:00
Nikos Mavrogiannopoulos
6986a97d12 tests: added missing file to dist files 2017-02-12 10:19:02 +01:00
Nikos Mavrogiannopoulos
12c4970c9e tests: removed firewall tests 
These were no longer up-to-date and were not checking the provided
functionality.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-02-06 01:54:48 +01:00
Nikos Mavrogiannopoulos
b3cbfbbcd5 tests: Added check for certificate alternative name checking 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
 2017-01-28 15:23:17 +01:00
Nikos Mavrogiannopoulos
2ceb0ffb47 radius-test: check whether the special IP values are handled 
In particular we check whether 255.255.255.254 is correctly
and the expected IP is assigned to client.
 2017-01-18 15:26:31 +01:00
Nikos Mavrogiannopoulos
d2f07e7c70 tests: use fedora 25 for docker tests 
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
 2017-01-18 15:18:49 +01:00
Mike Miller
e69a07ed6e tests: allow running tests with alternate OpenConnect 
Allow $OPENCONNECT in the caller's environment to override the default
openconnect system installation.

Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-23 08:04:59 +01:00
Mike Miller
dc222463e0 tests: fix test-sighup-key-change for current OpenConnect 
OpenConnect 7.08 removed the option `--no-cert-check`. Pass the actual
id of the newly generated server key. On systems with older versions of
GnuTLS, pass the server key fingerprint instead.

Resolves #81

Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-17 12:52:15 -08:00
Nikos Mavrogiannopoulos
b18cd67917 tests: make test-pass-script pass with new openconnect 
The new versions (7.07+) do not automatically send a bogus hostname,
they require the --local-hostname parameter to be passed.

Resolves #80
 2016-12-16 09:37:44 +01:00
Mike Miller
d3370cccd0 tests: allow test-gssapi to run on Debian 
Check for alternate filename of ntlmssp.conf on Debian-based systems.

Resolves #82

Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-16 09:24:43 +01:00
Mike Miller
9f0776e6ae tests: ensure unique temporary config file names 
Some unit tests share the same ocserv config file. Ensure that the file
written and used by each test script has a unique name.

Resolves #83

Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-15 16:44:14 -08:00
Nikos Mavrogiannopoulos
cd39da8ae1 tests: coverted to bash tests which had bashishms 2016-12-15 21:23:17 +01:00
Mike Miller
34fd11d3a8 Fix typos in man pages, config files, and comments 
Signed-off-by: Mike Miller <mtmiller@debian.org>
 2016-12-13 18:01:23 -08:00
Nikos Mavrogiannopoulos
2c64c99baa Reverted recursive make in src/ 
This simplifies the make process and allows for greater parallelism
during build.
 2016-12-13 15:37:07 +01:00
Nikos Mavrogiannopoulos
34caca57b0 tests: added basic checks for HTML escaping/unescaping 2016-10-16 16:58:49 +02:00