a47ac2bb32
Convert the IpSecTransform from being a bi-directional pair of SAs to a unidirectional single SA. This CL also removes the concept of "direction from SAs meaning that a IpSecTransform may now be applied to a socket in either direction. -Make transforms unidirectional -Add Convert allocateSpi() to use destination rather than direction and remote address -Remove directionality from builders for IpSecTransform -Change applyTransportModeTransform() to take a direction in which to apply the transform object. -Additional minor naming updates -Restrict IpSecConfig to only print keys on eng builds -Move DIRECTION constants to IpSecManager -Add sourceAddress parameter to IpSecTransform to provide additional guarantees about the source address of data; (explicit failure rather than implicit failure). -Move SPI to the build() method of IpSecTransform Bug: 71717213 Test: runtest frameworks-net, CTS - IpSecManagerTest Change-Id: I0824b37f443f4b8c62536d9801238c63ed8f2a1c
83 lines
3.0 KiB
Java
83 lines
3.0 KiB
Java
/*
|
|
* Copyright (C) 2017 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
package android.net;
|
|
|
|
import static org.junit.Assert.assertEquals;
|
|
import static org.junit.Assert.assertNull;
|
|
import static org.junit.Assert.assertTrue;
|
|
|
|
import android.os.Parcel;
|
|
import android.support.test.filters.SmallTest;
|
|
|
|
import org.junit.Test;
|
|
import org.junit.runner.RunWith;
|
|
import org.junit.runners.JUnit4;
|
|
|
|
/** Unit tests for {@link IpSecConfig}. */
|
|
@SmallTest
|
|
@RunWith(JUnit4.class)
|
|
public class IpSecConfigTest {
|
|
|
|
@Test
|
|
public void testDefaults() throws Exception {
|
|
IpSecConfig c = new IpSecConfig();
|
|
assertEquals(IpSecTransform.MODE_TRANSPORT, c.getMode());
|
|
assertEquals("", c.getSourceAddress());
|
|
assertEquals("", c.getDestinationAddress());
|
|
assertNull(c.getNetwork());
|
|
assertEquals(IpSecTransform.ENCAP_NONE, c.getEncapType());
|
|
assertEquals(IpSecManager.INVALID_RESOURCE_ID, c.getEncapSocketResourceId());
|
|
assertEquals(0, c.getEncapRemotePort());
|
|
assertEquals(0, c.getNattKeepaliveInterval());
|
|
assertNull(c.getEncryption());
|
|
assertNull(c.getAuthentication());
|
|
assertEquals(IpSecManager.INVALID_RESOURCE_ID, c.getSpiResourceId());
|
|
}
|
|
|
|
@Test
|
|
public void testParcelUnparcel() throws Exception {
|
|
assertParcelingIsLossless(new IpSecConfig());
|
|
|
|
IpSecConfig c = new IpSecConfig();
|
|
c.setMode(IpSecTransform.MODE_TUNNEL);
|
|
c.setSourceAddress("0.0.0.0");
|
|
c.setDestinationAddress("1.2.3.4");
|
|
c.setEncapType(android.system.OsConstants.UDP_ENCAP_ESPINUDP);
|
|
c.setEncapSocketResourceId(7);
|
|
c.setEncapRemotePort(22);
|
|
c.setNattKeepaliveInterval(42);
|
|
c.setEncryption(
|
|
new IpSecAlgorithm(
|
|
IpSecAlgorithm.CRYPT_AES_CBC,
|
|
new byte[] {0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 0xA, 0xB, 0xC, 0xD, 0xE, 0xF}));
|
|
c.setAuthentication(
|
|
new IpSecAlgorithm(
|
|
IpSecAlgorithm.AUTH_HMAC_MD5,
|
|
new byte[] {1, 2, 3, 4, 5, 6, 7, 8, 9, 0xA, 0xB, 0xC, 0xD, 0xE, 0xF, 0}));
|
|
c.setSpiResourceId(1984);
|
|
assertParcelingIsLossless(c);
|
|
}
|
|
|
|
private void assertParcelingIsLossless(IpSecConfig ci) throws Exception {
|
|
Parcel p = Parcel.obtain();
|
|
ci.writeToParcel(p, 0);
|
|
p.setDataPosition(0);
|
|
IpSecConfig co = IpSecConfig.CREATOR.createFromParcel(p);
|
|
assertTrue(IpSecConfig.equals(co, ci));
|
|
}
|
|
}
|