Libreswan's Online Documentation
View the Project on GitHub libreswan/libreswan.github.io
SupportRequirements to extend testing, test suite and tests themslef as of Fall 2017 =
Test run scripts in the test directory and support single domain(guest vm) test and multi-domain tests
<hostnamae>.sh
00-<host name>.sh Each host that is part of this test need one of these. These scripts could run in parallel on each test host.
nn-<host name>.sh will be executed serially on the <host> ordered by <nn> or <nnn>.
=
=
=
Ideally no iptables rules on the host. It could interfear with host xfrm rules and may interfear with conntrack rules. Such rules shoild be on the nic. This is deviation from the current model of east-west tests. Where I think we see iptable influencing the tests.
The testing could install libreswan in various ways. Each would support a specific use case.
= This is the most simple one. It will be useful for automated test runs ad developers to quickly test something.
=
for e.g. “make kvm-rpm” can create appropriate rpm files from the git repository for testing. These could be installed on each host.
The console output sanitizers are capable of distinguishing run from /usr/local/libexec/ipsec or rpm installed location.
If is useful to test interoperatbility with older versions. In such case you may want to able to specify rpm per host. So one or more host, say east and west would run, with different rpm.
Then there is are odd tests which need specific compile time options set
or unset. For example DNSEC defined or not, AUDIT is enabled or not. One
solution that comes to mind is add a
Possibly this could be hard to combine with rpms.
One way this could be supported is specify a custom rpm package.