config_test.go

package ike

import (
	"net"
	"reflect"
	"testing"
	"time"

	"github.com/davecgh/go-spew/spew"
	"github.com/msgboxio/ike/crypto"
	"github.com/msgboxio/ike/protocol"
)

func testConfig() *Config {
	return &Config{
		// ThrottleInitRequests: true,
		Lifetime: time.Hour,
		// set
		ProposalIke: crypto.Aes128Sha256Modp3072,
		ProposalEsp: crypto.Aes128Sha256,
	}
}

func TestCopyConfig(t *testing.T) {
	def := testConfig()
	copy := *def
	_, ipnet, _ := net.ParseCIDR("10.0.0.10/24")
	copy.AddNetworkSelectors(ipnet, ipnet, true)
	if reflect.DeepEqual(def.TsI, copy.TsI) {
		t.FailNow()
	}
}

func TestCheckProposals(t *testing.T) {
	cfg := &Config{
		ProposalIke: crypto.Aes128gcm16Prfsha256Ecp256,
		ProposalEsp: crypto.Aes256gcm16,
	}
	ikeProps := protocol.ProposalFromTransform(protocol.IKE, crypto.Aes128gcm16Prfsha256Ecp256, MakeSpi())
	if err := cfg.CheckProposals(protocol.IKE, ikeProps); err != nil {
		t.Error("IKE", err)
	}
	ipsecProps := protocol.ProposalFromTransform(protocol.ESP, crypto.Aes256gcm16, MakeSpi())
	if err := cfg.CheckProposals(protocol.ESP, ipsecProps); err != nil {
		t.Error("ESP", err)
	}
	if err := cfg.CheckProposals(protocol.IKE, ipsecProps); err == nil {
		spew.Dump(ipsecProps)
		t.Error("NO ERROR")
	}
}