[src/trunk]: src/tests/net/ipsec Fix incomplete SP setups

[ozaki-r <ozaki-r%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/5043fa8c9535
branches:  trunk
changeset: 827204:5043fa8c9535
user:      ozaki-r <ozaki-r%NetBSD.org@localhost>
date:      Fri Oct 20 03:43:51 2017 +0000

description:
Fix incomplete SP setups

diffstat:

 tests/net/ipsec/common.sh       |  5 ++++-
 tests/net/ipsec/t_ipsec_misc.sh |  4 +++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diffs (44 lines):

diff -r 6f119bb703dc -r 5043fa8c9535 tests/net/ipsec/common.sh
--- a/tests/net/ipsec/common.sh Fri Oct 20 03:42:53 2017 +0000
+++ b/tests/net/ipsec/common.sh Fri Oct 20 03:43:51 2017 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: common.sh,v 1.6 2017/08/08 02:27:03 ozaki-r Exp $
+#      $NetBSD: common.sh,v 1.7 2017/10/20 03:43:51 ozaki-r Exp $
 #
 # Copyright (c) 2017 Internet Initiative Japan Inc.
 # All rights reserved.
@@ -67,6 +67,9 @@
        atf_check -s exit:0 \
            -o match:"$local_addr\[any\] $remote_addr\[any\] 255\(reserved\)" \
            $HIJACKING setkey -D -P
+       atf_check -s exit:0 \
+           -o match:"$remote_addr\[any\] $local_addr\[any\] 255\(reserved\)" \
+           $HIJACKING setkey -D -P
        # TODO: more detail checks
 }
 
diff -r 6f119bb703dc -r 5043fa8c9535 tests/net/ipsec/t_ipsec_misc.sh
--- a/tests/net/ipsec/t_ipsec_misc.sh   Fri Oct 20 03:42:53 2017 +0000
+++ b/tests/net/ipsec/t_ipsec_misc.sh   Fri Oct 20 03:43:51 2017 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: t_ipsec_misc.sh,v 1.18 2017/08/03 03:16:27 ozaki-r Exp $
+#      $NetBSD: t_ipsec_misc.sh,v 1.19 2017/10/20 03:43:51 ozaki-r Exp $
 #
 # Copyright (c) 2017 Internet Initiative Japan Inc.
 # All rights reserved.
@@ -625,6 +625,7 @@
        export RUMP_SERVER=$SOCK_LOCAL
        cat > $tmpfile <<-EOF
        spdadd $ip_local $ip_peer any -P out ipsec $proto/transport//require;
+       spdadd $ip_peer $ip_local any -P in ipsec $proto/transport//require;
        EOF
        $DEBUG && cat $tmpfile
        atf_check -s exit:0 -o empty $HIJACKING setkey -c < $tmpfile
@@ -633,6 +634,7 @@
        export RUMP_SERVER=$SOCK_PEER
        cat > $tmpfile <<-EOF
        spdadd $ip_peer $ip_local any -P out ipsec $proto/transport//require;
+       spdadd $ip_local $ip_peer any -P in ipsec $proto/transport//require;
        EOF
        $DEBUG && cat $tmpfile
        atf_check -s exit:0 -o empty $HIJACKING setkey -c < $tmpfile