177 lines
5.8 KiB
C
177 lines
5.8 KiB
C
/**
|
|
* @file kernel_interface_test.h
|
|
*
|
|
* @brief Tests for the kernel_interface_t class.
|
|
*
|
|
*/
|
|
|
|
/*
|
|
* Copyright (C) 2006 Tobias Brunner, Daniel Roethlisberger
|
|
* Copyright (C) 2005-2006 Martin Willi
|
|
* Copyright (C) 2005 Jan Hutter
|
|
* Hochschule fuer Technik Rapperswil
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
|
|
#include "kernel_interface_test.h"
|
|
|
|
#include <daemon.h>
|
|
#include <threads/kernel_interface.h>
|
|
#include <utils/logger.h>
|
|
#include <utils/host.h>
|
|
|
|
|
|
/**
|
|
* @brief private method to test kernel_interface with optional NAT-T configuration data
|
|
*/
|
|
void private_test_kernel_interface(protected_tester_t *tester, natt_conf_t *natt)
|
|
{
|
|
kernel_interface_t *kernel_interface;
|
|
u_int32_t spi;
|
|
host_t *me, *other, *left, *right;
|
|
status_t status;
|
|
prf_plus_t *prf_plus;
|
|
prf_t *prf;
|
|
u_int8_t key_bytes[] = {
|
|
0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,
|
|
0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08
|
|
};
|
|
chunk_t key = chunk_from_buf(key_bytes);
|
|
algorithm_t int_alg = {AUTH_HMAC_MD5_96, 0};
|
|
algorithm_t enc_alg = {ENCR_AES_CBC, 128};
|
|
|
|
prf = prf_create(PRF_HMAC_MD5);
|
|
prf->set_key(prf, key);
|
|
prf_plus = prf_plus_create(prf, key);
|
|
|
|
|
|
kernel_interface = kernel_interface_create();
|
|
|
|
me = host_create(AF_INET, "192.168.0.2", 0);
|
|
other = host_create(AF_INET, "192.168.0.3", 0);
|
|
|
|
status = kernel_interface->get_spi(kernel_interface, me, other, PROTO_ESP, 1234, &spi);
|
|
tester->assert_true(tester, status == SUCCESS, "spi get");
|
|
|
|
status = kernel_interface->add_sa(kernel_interface, me, other, spi, PROTO_ESP, 1234, 5, 10, &enc_alg, &int_alg, prf_plus, natt, TRUE);
|
|
tester->assert_true(tester, status == SUCCESS, "add sa");
|
|
|
|
left = host_create(AF_INET, "10.1.0.0", 0);
|
|
right = host_create(AF_INET, "10.2.0.0", 0);
|
|
|
|
status = kernel_interface->add_policy(kernel_interface, me, other, left, right, 16, 16, XFRM_POLICY_OUT, 0, PROTO_ESP, 1234, FALSE);
|
|
tester->assert_true(tester, status == SUCCESS, "add policy");
|
|
|
|
status = kernel_interface->del_policy(kernel_interface, left, right, 16, 16, XFRM_POLICY_OUT, 0);
|
|
tester->assert_true(tester, status == SUCCESS, "del policy");
|
|
|
|
status = kernel_interface->del_sa(kernel_interface, other, spi, PROTO_ESP);
|
|
tester->assert_true(tester, status == SUCCESS, "del sa");
|
|
|
|
me->destroy(me);
|
|
other->destroy(other);
|
|
left->destroy(left);
|
|
right->destroy(right);
|
|
|
|
kernel_interface->destroy(kernel_interface);
|
|
}
|
|
|
|
/*
|
|
* described in Header-File
|
|
*/
|
|
void test_kernel_interface(protected_tester_t *tester)
|
|
{
|
|
private_test_kernel_interface(tester, NULL);
|
|
}
|
|
|
|
/*
|
|
* described in Header-File
|
|
*/
|
|
void test_kernel_interface_with_nat(protected_tester_t *tester)
|
|
{
|
|
natt_conf_t natt;
|
|
natt.sport = 4500;
|
|
natt.dport = 9876;
|
|
|
|
private_test_kernel_interface(tester, &natt);
|
|
}
|
|
|
|
void test_kernel_interface_update_hosts(protected_tester_t *tester)
|
|
{
|
|
kernel_interface_t *kernel_interface;
|
|
u_int32_t spi;
|
|
host_t *me, *other, *new_me, *new_other, *left, *right;
|
|
status_t status;
|
|
prf_plus_t *prf_plus;
|
|
prf_t *prf;
|
|
u_int8_t key_bytes[] = {
|
|
0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,
|
|
0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08
|
|
};
|
|
chunk_t key = chunk_from_buf(key_bytes);
|
|
algorithm_t int_alg = {AUTH_HMAC_MD5_96, 0};
|
|
algorithm_t enc_alg = {ENCR_AES_CBC, 128};
|
|
|
|
prf = prf_create(PRF_HMAC_MD5);
|
|
prf->set_key(prf, key);
|
|
prf_plus = prf_plus_create(prf, key);
|
|
|
|
kernel_interface = kernel_interface_create();
|
|
|
|
me = host_create(AF_INET, "192.168.0.2", 0);
|
|
other = host_create(AF_INET, "192.168.0.3", 0);
|
|
|
|
natt_conf_t natt;
|
|
natt.sport = 4500;
|
|
natt.dport = 9876;
|
|
|
|
status = kernel_interface->get_spi(kernel_interface, me, other, PROTO_ESP, 1234, &spi);
|
|
tester->assert_true(tester, status == SUCCESS, "spi get");
|
|
|
|
status = kernel_interface->add_sa(kernel_interface, me, other, spi, PROTO_ESP, 1234, 5, 10, &enc_alg, &int_alg, prf_plus, &natt, TRUE);
|
|
tester->assert_true(tester, status == SUCCESS, "add sa");
|
|
|
|
left = host_create(AF_INET, "10.1.0.0", 0);
|
|
right = host_create(AF_INET, "10.2.0.0", 0);
|
|
|
|
status = kernel_interface->add_policy(kernel_interface, me, other, left, right, 16, 16, XFRM_POLICY_OUT, 0, PROTO_ESP, 1234, FALSE);
|
|
tester->assert_true(tester, status == SUCCESS, "add policy OUT");
|
|
status = kernel_interface->add_policy(kernel_interface, me, other, left, right, 16, 16, XFRM_POLICY_IN, 0, PROTO_ESP, 1234, FALSE);
|
|
tester->assert_true(tester, status == SUCCESS, "add policy IN");
|
|
status = kernel_interface->add_policy(kernel_interface, me, other, left, right, 16, 16, XFRM_POLICY_FWD, 0, PROTO_ESP, 1234, FALSE);
|
|
tester->assert_true(tester, status == SUCCESS, "add policy FWD");
|
|
|
|
new_me = host_create(AF_INET, "192.168.1.12", 4500);
|
|
new_other = host_create(AF_INET, "192.168.1.13", 6543);
|
|
|
|
status = kernel_interface->update_sa_hosts(kernel_interface, me, other, new_me, new_other, me->get_differences(me, new_me), other->get_differences(other, new_other), spi, PROTO_ESP);
|
|
tester->assert_true(tester, status == SUCCESS, "update hosts on sa");
|
|
|
|
status = kernel_interface->del_policy(kernel_interface, left, right, 16, 16, XFRM_POLICY_OUT, 0);
|
|
tester->assert_true(tester, status == SUCCESS, "del policy");
|
|
|
|
status = kernel_interface->del_sa(kernel_interface, other, spi, PROTO_ESP);
|
|
tester->assert_true(tester, status == SUCCESS, "del sa");
|
|
|
|
me->destroy(me);
|
|
other->destroy(other);
|
|
new_me->destroy(new_me);
|
|
new_other->destroy(new_other);
|
|
left->destroy(left);
|
|
right->destroy(right);
|
|
|
|
sleep(15);
|
|
|
|
kernel_interface->destroy(kernel_interface);
|
|
}
|