kernel-netlink: Support extended table IDs for custom routes
[strongswan.git] / src / libcharon / tests / suites / test_child_create.c
1 /*
2 * Copyright (C) 2016 Tobias Brunner
3 * HSR Hochschule fuer Technik Rapperswil
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13 * for more details.
14 */
15
16 #include "test_suite.h"
17
18 #include <daemon.h>
19 #include <tests/utils/exchange_test_helper.h>
20 #include <tests/utils/exchange_test_asserts.h>
21 #include <tests/utils/job_asserts.h>
22 #include <tests/utils/sa_asserts.h>
23
24 /**
25 * One of the peers tries to create a new CHILD_SA while the other concurrently
26 * started to rekey the IKE_SA. TEMPORARY_FAILURE should be returned on both
27 * sides and the peers should prepare to retry.
28 */
29 START_TEST(test_collision_ike_rekey)
30 {
31 child_cfg_t *child_cfg;
32 child_cfg_create_t child = {
33 .mode = MODE_TUNNEL,
34 };
35 ike_sa_t *a, *b;
36
37 exchange_test_helper->establish_sa(exchange_test_helper,
38 &a, &b, NULL);
39
40 assert_hook_not_called(child_updown);
41 child_cfg = child_cfg_create("child", &child);
42 child_cfg->add_proposal(child_cfg, proposal_create_default(PROTO_ESP));
43 child_cfg->add_traffic_selector(child_cfg, TRUE,
44 traffic_selector_create_dynamic(0, 0, 65535));
45 child_cfg->add_traffic_selector(child_cfg, FALSE,
46 traffic_selector_create_dynamic(0, 0, 65535));
47 call_ikesa(a, initiate, child_cfg, 0, NULL, NULL);
48 assert_child_sa_count(a, 1);
49 assert_hook();
50
51 call_ikesa(b, rekey);
52
53 /* CREATE_CHILD_SA { SA, Ni, [KEi,] TSi, TSr } --> */
54 assert_hook_not_called(child_updown);
55 assert_single_notify(OUT, TEMPORARY_FAILURE);
56 exchange_test_helper->process_message(exchange_test_helper, b, NULL);
57 assert_child_sa_count(b, 1);
58 assert_hook();
59
60 /* <-- CREATE_CHILD_SA { SA, Ni, KEi } */
61 assert_single_notify(OUT, TEMPORARY_FAILURE);
62 exchange_test_helper->process_message(exchange_test_helper, a, NULL);
63
64 /* <-- CREATE_CHILD_SA { N(TEMP_FAIL) } */
65 assert_hook_not_called(child_updown);
66 assert_jobs_scheduled(1);
67 exchange_test_helper->process_message(exchange_test_helper, a, NULL);
68 assert_child_sa_count(a, 1);
69 assert_scheduler();
70 assert_hook();
71
72 /* CREATE_CHILD_SA { N(TEMP_FAIL) } --> */
73 assert_jobs_scheduled(1);
74 exchange_test_helper->process_message(exchange_test_helper, b, NULL);
75 assert_ike_sa_state(b, IKE_ESTABLISHED);
76 assert_scheduler();
77
78 /* make sure no message was sent after handling the TEMPORARY_FAILURE and
79 * that the task to retry creating the CHILD_SA is queued and not active
80 * and it can't be initiated immediately */
81 ck_assert(!exchange_test_helper->sender->dequeue(exchange_test_helper->sender));
82 assert_num_tasks(a, 0, TASK_QUEUE_ACTIVE);
83 assert_num_tasks(a, 1, TASK_QUEUE_QUEUED);
84 call_ikesa(a, initiate, NULL, 0, NULL, NULL);
85 assert_num_tasks(a, 0, TASK_QUEUE_ACTIVE);
86
87 assert_sa_idle(b);
88
89 call_ikesa(a, destroy);
90 call_ikesa(b, destroy);
91 }
92 END_TEST
93
94 Suite *child_create_suite_create()
95 {
96 Suite *s;
97 TCase *tc;
98
99 s = suite_create("child create");
100
101 tc = tcase_create("collisions ike rekey");
102 tcase_add_test(tc, test_collision_ike_rekey);
103 suite_add_tcase(s, tc);
104
105 return s;
106 }