306a6c7aa9
Add initial cram tests for tr181-ipsec, including an end-to-end test with IKEv2 certificate authentication: a dedicated strongSwan charon instance runs inside a network namespace (with a private /var/run tmpfs to isolate it from the CPE charon) behind a veth pair emulating the WAN link, so the test is self-contained and is not tied to a specific board. Certificates are generated on the DUT: a self-signed one for the CPE, and for the peer an end entity certificate issued by a dedicated CA, since IKEv2RemoteAuthenticationMethod designates the authority the peer is validated against rather than the peer certificate itself. They are imported through /etc/config/autocert into Security.Certificate, and referenced from an IPsec.Profile/Filter pair. The end-to-end test verifies the IKEv2 SA and Child SA come up and that protected traffic flows. References: PCF-2469, FEAT-150 Signed-off-by: Alin Nastac <alin.nastac@softathome.com> Signed-off-by: Alexandre Fiset <alexandre.fiset@softathome.com> |
||
|---|---|---|
| .. | ||
| cram | ||
| README.md | ||
Content
This directory contains tests.
cram
Contains Cram based tests. Cram is a functional testing framework for command line applications. Cram tests look like snippets of interactive shell sessions. Cram runs each command and compares the command output in the test with the command's actual output.
Tests in this directory should be run against device, usually over network via SSH connection.