GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 08:46:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
fc842a8d5dc10df745b60b90a1c05e97e29d0224
ocserv/tests
History
Nikos Mavrogiannopoulos 8aa39b0106 Improved user disconnection to avoid race conditions 
Previously when we were disconnecting a user there were few seconds
after which the cookie was still valid, so a reconnect would succeed
by the same user. This change ensures that a disconnected (via occtl)
user cannot re-use the same cookie to connect. That enables a safe
user removal from the authentication database, and from run-time.

Resolves: #59

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-07-25 21:38:55 +02:00
..
certs
.gitlab-ci.yml: corrected kerberos tests
2020-04-10 23:06:07 +02:00
data
Improved user disconnection to avoid race conditions
2020-07-25 21:38:55 +02:00
docker-ocserv
tests: rewrite the radius tests using namespaces
2019-06-03 22:47:23 +02:00
scripts
vpnc-script: added attempt-reconnect
2020-04-06 13:49:01 +02:00
user-config
ocserv: added support for per-user split-dns directive
2019-11-17 11:06:47 +01:00
user-config-explicit
tests: fixed explicit-ip check
2015-02-19 17:20:52 +01:00
user-config-opt
test-pass-opt-cert: updated for enable-auth config option
2015-02-19 11:47:20 +01:00
ac-aes128-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
ac-aes256-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
aes128-cipher
tests: added unit tests for AES-128-GCM and AES-256-GCM
2018-07-20 22:06:11 +02:00
aes256-cipher
tests: added unit tests for AES-128-GCM and AES-256-GCM
2018-07-20 22:06:11 +02:00
apple-ios
tests: verify environment under Apple clients
2020-03-16 22:21:37 +01:00
ban-ips.c
Introduced the notion of virtual hosts
2018-03-06 20:42:31 +01:00
cipher-common.sh
tests: added test for PSK-NEGOTIATE ciphers
2020-03-12 13:23:06 +01:00
common.sh
add basic namespace support for listen address
2020-07-13 18:11:30 +02:00
config-auth.xml
Add support for RFC6750 bearer tokens to ocserv
2020-03-09 21:48:04 +01:00
connect-ios-script
tests: verify environment under Apple clients
2020-03-16 22:21:37 +01:00
connect-script
tests: verify environment under Apple clients
2020-03-16 22:21:37 +01:00
cstp-recv.c
tests: added unit test for cstp_recv_nb()
2017-03-24 20:07:47 +01:00
disconnect-user
Improved user disconnection to avoid race conditions
2020-07-25 21:38:55 +02:00
disconnect-user2
Improved user disconnection to avoid race conditions
2020-07-25 21:38:55 +02:00
docker-common.sh
tests: remove the explicit docker pull commands from docker-common.sh
2016-06-08 17:01:48 +02:00
flowcontrol
Improve accept rate limitation and make it conditional on queue depth.
2020-07-11 12:51:29 +02:00
generate_oidc_test_data.c
Attempt to download updated JWKs if the client presents an unknown key.
2020-04-19 16:30:12 -06:00
haproxy-auth
tests: added test with proxy-protocol
2018-04-01 13:30:47 +02:00
haproxy-connect
tests: separate resources in haproxy-connect in test-udp-listen-host
2020-04-08 19:25:47 +02:00
html-escape.c
tests for unescaping decimal HTML escapes and '+' in URLs
2018-01-13 12:56:59 -08:00
human_addr.c
tests: added check for human_addr() output
2016-02-19 10:04:21 +01:00
ipv4-prefix.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
ipv6-iface
tests: check whether ipv6 interface is up
2020-05-13 06:16:27 +02:00
ipv6-prefix.c
tests: improved ipv6-prefix
2020-03-12 19:47:50 +01:00
json
occtl: fix json in show status
2019-09-25 20:37:16 +02:00
json-escape.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
kerberos
.gitlab-ci.yml: corrected kerberos tests
2020-04-10 23:06:07 +02:00
kkdcp-parsing.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
lz4-compression
tests: make ping cmd functional in centos7,6
2019-03-12 17:21:17 +01:00
lzs-compression
tests: make ping cmd functional in centos7,6
2019-03-12 17:21:17 +01:00
Makefile.am
Improved user disconnection to avoid race conditions
2020-07-25 21:38:55 +02:00
multiple-routes
tests: added reproducer for #141
2018-03-21 12:28:24 +01:00
no-dtls-cipher
worker: added safety check for selected DTLS ciphersuite prior to use
2019-01-19 18:19:11 +01:00
no-route-default
tests: added test cases for no-route in group and main configuration
2020-05-30 10:38:44 +02:00
no-route-group
tests: added test cases for no-route in group and main configuration
2020-05-30 10:38:44 +02:00
ns.sh
tests, ns: use namespace option for all ip commands
2020-07-14 12:15:46 +02:00
oc-aes128-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
oc-aes256-gcm-cipher
tests: added tests for anyconnect's DTLS1.2 support
2019-01-19 18:19:09 +01:00
ocpasswd-test
Update ocpasswd-test
2017-10-09 21:42:30 +02:00
port-parsing.c
tests: properly handle memory in cfg_parse_ports() unit test
2018-04-14 14:23:21 +02:00
proxyproto-test
tests: use the .tmp suffix to pid files
2016-06-17 11:56:43 +02:00
proxyproto-unix-test
tests: use the .tmp suffix to pid files
2016-06-17 11:56:43 +02:00
proxyproto-v1-test
tests: added check for proxy protocol v1
2017-03-28 08:11:53 +02:00
proxyproto-v1.c
tests: added unit test for proxy protocol v1
2017-03-28 08:15:35 +02:00
psk-negotiate
tests: added test to test match-tls-dtls-ciphers config option
2020-03-12 17:01:01 +01:00
psk-negotiate-match
tests: added test to test match-tls-dtls-ciphers config option
2020-03-12 17:01:01 +01:00
radius
tests: radius: save log on CI failure
2020-02-13 22:25:13 +01:00
radius-config
radius-config: stability updates
2020-06-29 12:06:35 +02:00
radius-group
tests: radius: save log on CI failure
2020-02-13 22:25:13 +01:00
radius-otp
tests: radius: save log on CI failure
2020-02-13 22:25:13 +01:00
reload-info-test
tests: use the .tmp suffix to pid files
2016-06-17 11:56:43 +02:00
server-cert-ed25519
tests: check server functionality with Ed25519/RSA-PSS certs
2017-08-23 12:00:15 +02:00
server-cert-rsa-pss
tests: check server functionality with Ed25519/RSA-PSS certs
2017-08-23 12:00:15 +02:00
sleep-connect-script
tests: added test to check whether server blocks if script blocks
2020-02-07 22:46:21 +01:00
str-test2.c
tests: added check for trim_trailing_whitespace()
2016-04-01 15:33:11 +02:00
str-test.c
tests: avoid source dependencies from other dirs in Makefile
2015-11-19 14:35:16 +01:00
test-append-routes
tests: moved config files to data/
2016-06-17 11:54:03 +02:00
test-ban
occtl: list actual banned entries
2020-04-03 22:09:14 +02:00
test-cert
tests: moved all certificates and keys in certs/
2016-06-17 11:53:50 +02:00
test-cert-opt-pass
tests: added check cert or pass auth
2018-02-25 16:03:50 +01:00
test-config-per-group
tests: make ping cmd functional in centos7,6
2019-03-12 17:21:17 +01:00
test-cookie-invalidation
tests: updated for increase in slack time
2018-01-06 08:55:02 +01:00
test-cookie-timeout
test-cookie-timeout: updated for new openconnect kill semantics
2019-01-19 13:39:11 +01:00
test-cookie-timeout-2
tests: moved config files to data/
2016-06-17 11:54:03 +02:00
test-enc-key
tests: modified cwrap tests to run from different builddir
2015-11-19 14:30:48 +01:00
test-explicit-ip
tests: moved config files to data/
2016-06-17 11:54:03 +02:00
test-fork
main: create a sec-mod socket file independent of pid
2018-05-11 22:04:28 +02:00
test-get-cert
tests: moved all certificates and keys in certs/
2016-06-17 11:53:50 +02:00
test-group-cert
tests: moved config files to data/
2016-06-17 11:54:03 +02:00
test-group-name
translate labels to groups when provided by client
2020-05-21 22:24:17 +02:00
test-group-pass
tests: modified cwrap tests to run from different builddir
2015-11-19 14:30:48 +01:00
test-gssapi
tests: test-gssapi is now run as non-root
2017-09-09 10:51:42 +02:00
test-gssapi-opt-cert
tests: introduced tests with gssapi falling back to pass or certs
2018-02-25 16:31:55 +01:00
test-gssapi-opt-pass
tests: introduced tests with gssapi falling back to pass or certs
2018-02-25 16:31:55 +01:00
test-iroute
tests: moved config files to data/
2016-06-17 11:54:03 +02:00
test-maintenance
tests: added test to unit test the maintenance cycle
2018-04-15 09:25:51 +02:00
test-max-same-1
tests: test-max-same-1/test-multi-cookie: use update_config
2020-04-08 19:37:57 +02:00
test-multi-cookie
tests: test-max-same-1/test-multi-cookie: use update_config
2020-04-08 19:37:57 +02:00
test-namespace-listen
add basic namespace support for listen address
2020-07-13 18:11:30 +02:00
test-oidc
Attempt to download updated JWKs if the client presents an unknown key.
2020-04-19 16:30:12 -06:00
test-otp
tests: check whether ocserv is build with oath support prior to running otp tests
2018-02-25 16:03:33 +01:00
test-otp-cert
tests: check whether ocserv is build with oath support prior to running otp tests
2018-02-25 16:03:33 +01:00
test-pam
tests: clean-up pam server initiation
2019-11-17 11:10:19 +01:00
test-pam-noauth
tests: clean-up pam server initiation
2019-11-17 11:10:19 +01:00
test-pass
tests: added check with empty password
2018-09-22 21:11:19 +02:00
test-pass-cert
tests: consistently disable isolate-workers in tests
2019-01-20 06:43:47 +01:00
test-pass-group-cert
tests: moved all certificates and keys in certs/
2016-06-17 11:53:50 +02:00
test-pass-group-cert-no-pass
tests: moved all certificates and keys in certs/
2016-06-17 11:53:50 +02:00
test-pass-opt-cert
tests: use the --pid-file and -p options in ocserv
2018-03-01 19:18:54 +01:00
test-pass-script
Script needs access to additional client metadata.
2020-03-11 09:13:55 +01:00
test-san-cert
tests: Added check for certificate alternative name checking
2017-01-28 15:23:17 +01:00
test-script-multi-user
tests: added test to check whether server blocks if script blocks
2020-02-07 22:46:21 +01:00
test-sighup
Uses fork/exec to limit memory footprint of ocserv-worker processes
2020-05-25 08:33:16 +02:00
test-sighup-key-change
tests: fix test-sighup-key-change for current OpenConnect
2016-12-17 12:52:15 -08:00
test-stress
tests: moved config files to data/
2016-06-17 11:54:03 +02:00
test-udp-listen-host
test-udp-listen-host: added some reliability improvements
2020-06-29 12:06:29 +02:00
test-user-config
ocserv: added support for per-user split-dns directive
2019-11-17 11:06:47 +01:00
test-vhost
tests: introduced test program to check basic vhost functionality
2018-03-06 20:42:33 +01:00
traffic
tests: make ping cmd functional in centos7,6
2019-03-12 17:21:17 +01:00
unix-test
tests: kill politely openconnect in all docker tests
2015-12-07 14:40:36 +01:00
url-escape.c
Make escape_url() percent-escape fewer characters and escape ' ' as '+'
2018-01-13 13:11:33 -08:00
valid-hostname.c
tests: added unit test for valid_hostname() function
2016-06-18 14:27:40 +02:00