GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-09 16:26:59 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
80babceacf119de408983adf3fa7cffa4aacfcdf
ocserv/tests
History
William Dauchy 80babceacf listen-netns: fix worker case for DTLS 
while using udp, we later open a file descriptor for the worker. With a
listen netns config, I overlooked this case which oblige me to move the
struct containing the file descriptor in the main one. Then I can access
them from each worker to make it possible to open the socket in the
correct netns. I also need to keep the netns fd open during the whole
life of the process.

the issue was not visible on a tcp-only case, but while using udp you
can see logs such as:

main[user]: x.x.x.x:54024 bind UDP to 0.0.0.0:443: Cannot assign requested address
worker[user]: x.x.x.x setting up DTLS-PSK connection
main[user]: x.x.x.x:54024 bind UDP to 0.0.0.0:443: Cannot assign requested address

update tests to reflects that:
- instead of creating our own netns, use the one created in common.sh
- we start server in ns1, but listen in ns2, and test client from ns3
  (we don't want to listen in ns1 to test listen-ns)

Signed-off-by: William Dauchy <w.dauchy@criteo.com>
2020-09-20 21:49:08 +02:00
..
certs
.gitlab-ci.yml: corrected kerberos tests
2020-04-10 23:06:07 +02:00
data
listen-netns: fix worker case for DTLS
2020-09-20 21:49:08 +02:00
scripts
tests: introduced new proxy protocol tests
2020-08-09 21:32:27 +02:00
user-config
ocserv: added support for per-user split-dns directive
2019-11-17 11:06:47 +01:00
user-config-explicit
tests: fixed explicit-ip check
2015-02-19 17:20:52 +01:00
user-config-opt
test-pass-opt-cert: updated for enable-auth config option
2015-02-19 11:47:20 +01:00
ac-aes128-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
ac-aes256-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
aes128-cipher
tests: added unit tests for AES-128-GCM and AES-256-GCM
2018-07-20 22:06:11 +02:00
aes256-cipher
tests: added unit tests for AES-128-GCM and AES-256-GCM
2018-07-20 22:06:11 +02:00
apple-ios
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
ban-ips.c
Introduced the notion of virtual hosts
2018-03-06 20:42:31 +01:00
banner
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
cipher-common.sh
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
common.sh
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
config-auth.xml
Add support for RFC6750 bearer tokens to ocserv
2020-03-09 21:48:04 +01:00
connect-ios-script
tests: verify environment under Apple clients
2020-03-16 22:21:37 +01:00
connect-script
use REMOTE_HOSTNAME to pass the user's advertised hostname
2020-08-05 23:05:24 +02:00
cstp-recv.c
tests: added unit test for cstp_recv_nb()
2017-03-24 20:07:47 +01:00
disconnect-user
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
disconnect-user2
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
flowcontrol
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
generate_oidc_test_data.c
Attempt to download updated JWKs if the client presents an unknown key.
2020-04-19 16:30:12 -06:00
haproxy-auth
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
haproxy-connect
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
haproxy-proxyproto
tests: introduced new proxy protocol tests
2020-08-09 21:32:27 +02:00
haproxy-proxyproto-v1
tests: introduced new proxy protocol tests
2020-08-09 21:32:27 +02:00
html-escape.c
tests for unescaping decimal HTML escapes and '+' in URLs
2018-01-13 12:56:59 -08:00
human_addr.c
tests: added check for human_addr() output
2016-02-19 10:04:21 +01:00
invalid-configs
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
ipv4-prefix.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
ipv6-iface
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
ipv6-prefix.c
tests: improved ipv6-prefix
2020-03-12 19:47:50 +01:00
json
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
json-escape.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
kerberos
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
kkdcp-parsing.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
lz4-compression
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
lzs-compression
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
Makefile.am
Stop accepting new TCP connections when the server is at maximum active connection capacity.
2020-08-28 16:01:35 -06:00
multiple-routes
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
no-dtls-cipher
worker: added safety check for selected DTLS ciphersuite prior to use
2019-01-19 18:19:11 +01:00
no-route-default
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
no-route-group
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
ns.sh
ns.sh: conditionally call IP with NSNAME3 route
2020-09-03 14:34:03 +02:00
oc-aes128-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
oc-aes256-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
ocpasswd-test
Update ocpasswd-test
2017-10-09 21:42:30 +02:00
ping-leases
tests: added test for ping-leases
2020-08-09 17:59:04 +02:00
port-parsing.c
tests: properly handle memory in cfg_parse_ports() unit test
2018-04-14 14:23:21 +02:00
proxyproto-v1.c
tests: added unit test for proxy protocol v1
2017-03-28 08:15:35 +02:00
psk-negotiate
tests: added test to test match-tls-dtls-ciphers config option
2020-03-12 17:01:01 +01:00
psk-negotiate-match
tests: added test to test match-tls-dtls-ciphers config option
2020-03-12 17:01:01 +01:00
radius
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
radius-config
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
radius-group
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
radius-otp
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
resumption
tests: added session resumption test
2020-08-09 11:54:04 +02:00
server-cert-ed25519
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
server-cert-rsa-pss
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
sleep-connect-script
tests: added test to check whether server blocks if script blocks
2020-02-07 22:46:21 +01:00
str-test2.c
tests: added check for trim_trailing_whitespace()
2016-04-01 15:33:11 +02:00
str-test.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
test-append-routes
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-ban
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-cert-opt-pass
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-config-per-group
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-cookie-invalidation
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-cookie-timeout
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-cookie-timeout-2
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-drain-server
Stop accepting new TCP connections when the server is at maximum active connection capacity.
2020-08-28 16:01:35 -06:00
test-enc-key
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-explicit-ip
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-fork
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-get-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-group-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-group-name
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-group-pass
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-gssapi
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-gssapi-opt-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-gssapi-opt-pass
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-iroute
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-maintenance
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-max-same-1
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-multi-cookie
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-multiple-client-ip
Modify ocserv-sm to permit it to scale up to the number of CPUs. This permits a higher rate of client connections and prevents TLS signing from becoming a bottleneck for clients connecting.
2020-08-26 09:46:04 -06:00
test-namespace-listen
listen-netns: fix worker case for DTLS
2020-09-20 21:49:08 +02:00
test-oidc
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-otp
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-otp-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pam
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pam-noauth
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pass
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pass-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pass-group-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pass-group-cert-no-pass
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pass-opt-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-pass-script
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-san-cert
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-script-multi-user
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-sighup
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-sighup-key-change
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-stress
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-udp-listen-host
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-user-config
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
test-vhost
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
traffic
tests: replaced explicit ports with random assignment
2020-08-09 13:14:22 +02:00
unix-test
tests: kill politely openconnect in all docker tests
2015-12-07 14:40:36 +01:00
url-escape.c
Make escape_url() percent-escape fewer characters and escape ' ' as '+'
2018-01-13 13:11:33 -08:00
valid-hostname.c
tests: added unit test for valid_hostname() function
2016-06-18 14:27:40 +02:00