//

// Copyright (c) 2009 Nokia Corporation and/or its subsidiary(-ies).

// All rights reserved.

// This component and the accompanying materials are made available

// under the terms of the License "Eclipse Public License v1.0"

// which accompanies this distribution, and is available

// at the URL "http://www.eclipse.org/legal/epl-v10.html".

//

// Initial Contributors:

// Nokia Corporation - initial contribution.

//

// Contributors:

//

// Description:

//

// Streaming CAF IpSec Unit Tests

PRINT Run PREQ782 Streaming CAF IpSec Unit Tests

// Load Suite

LOAD_SUITE tscaf

//! @SYMTestCaseID 		SEC-SCAF-E001

//! @SYMTestCaseDesc 		Smoke testing for IPSec plugin

//! 				(ipsec_positiveconstruct)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		Critical

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 		

//!				•	Generate a IPSec protected key stream description.

//!				•	Create a key stream sink from the protected key stream description.

//!				•	Create an IPSec key association.

//!				•	Supply the key association to the IPSec key stream sink.

//!

//! @SYMTestExpectedResults 	• Interfaces are invoked without leaves and panics.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E001

RUN_TEST_STEP 100 tscaf SCAFIpSec z:\tcaf\tscaf\tscaf.ini ipsec_positiveconstruct

END_TESTCASE SEC-SCAF-E001

//! @SYMTestCaseID 		SEC-SCAF-E002

//! @SYMTestCaseDesc 		Testing SADB integration

//! 				(ipsec_verify_sadb)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		Critical

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 		

//!				•	Same as with SEC-SCAF-E001. Take care to create a key association with a known SPI - SPI x.

//!				•	Query the SADB with SADB_GET message on SPI x.

//!				•	Submit another key association through IPSec with SPI y.

//!				•	Query the SADB to verify that the SPI was submitted correctly.

//! @SYMTestExpectedResults 	• Expected SA entries match when queried from SADB.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E002

RUN_TEST_STEP 100 tscaf SCAFIpSecSadbVerification z:\tcaf\tscaf\tscaf.ini ipsec_verify_sadb

END_TESTCASE SEC-SCAF-E002

//! @SYMTestCaseID 		SEC-SCAF-E003

//! @SYMTestCaseDesc 		Testing SADB integration under concurrency

//! 				(ipsec_verify_sadb_concurrency)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 		

//!				•	Same as with SEC-SCAF-E002, but using multiple threads - each hosting a different key stream sink. Different SPI values must be used in each key stream sink to avoid collisions in the SADB.

//! @SYMTestExpectedResults 	• Expected SA entries match when queried from SADB.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E003

RUN_TEST_STEP 200 tscaf SCAFIpSecSadbVerificationConcurrency z:\tcaf\tscaf\tscaf.ini ipsec_verify_sadb_concurrency

END_TESTCASE SEC-SCAF-E003

//! @SYMTestCaseID 		SEC-SCAF-E007

//! @SYMTestCaseDesc 		Negative testing for IPSec components

//! 				(ipsec_negative)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 	

//!				•	Create an IPSec key stream sink as detailed in SEC-SCAF-A001.

//!				•	Create an IPSec key association with incorrect keys.

//!				•	Submit it to key stream sink - step A.

//!				•	Create a non-IPSec key association.

//!				•	Submit it to key stream sink - step B.

//!				•	Delete the key stream sink.

//!				•	Try adding twice the same valid key association again - step C. The second key association addition should fail.	

//! @SYMTestExpectedResults 	• 	Proper errors are returned in all steps.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E007

RUN_TEST_STEP 100 tscaf SCAFIpSecNegative z:\tcaf\tscaf\tscaf.ini ipsec_negative

END_TESTCASE SEC-SCAF-E007

//! @SYMTestCaseID 		SEC-SCAF-E009

//! @SYMTestCaseDesc 		SA Removal

//! 				(ipsec_sa_removal)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 	

//!				•	Create an IPSec key stream sink as detailed in SEC-SCAF-A001.

//!				•	Submit 10 different key associations - all with different SPI-s.

//!				•	Query the SADB.

//! @SYMTestExpectedResults 	• 	Only the last 3 SA-s should be present in the SADB. The first 7 must not be present. The number 3 is a source constant - KDefaulMaxSpiNumber.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E009

RUN_TEST_STEP 100 tscaf SCAFIpSecSARemoval z:\tcaf\tscaf\tscaf.ini ipsec_sa_removal

END_TESTCASE SEC-SCAF-E009

//! @SYMTestCaseID 		SEC-SCAF-E010

//! @SYMTestCaseDesc 		Change of algorithms

//! 				(ipsec_algorithm_change)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		Medium

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 	

//!				•	Create an IPSec key stream sink as detailed in SEC-SCAF-A001.

//!				•	Submit an IPSec key association with arbitrary parameters.

//!				•	Try changing the encryption algorithm.

//!				•	Repeat the previous steps, while trying to change the authentication algorithm.

//! @SYMTestExpectedResults 	• 	KErrNotSupported should be returned each time.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E010

RUN_TEST_STEP 100 tscaf SCAFIpSecAlgorithmChange z:\tcaf\tscaf\tscaf.ini ipsec_algorithm_change

END_TESTCASE SEC-SCAF-E010

//! @SYMTestCaseID 		SEC-SCAF-E011

//! @SYMTestCaseDesc 		IPSec - no authentication

//! 				(ipsec_no_authentication)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 	

//!				•	Create an IPSec key stream sink as detailed in SEC-SCAF-A001.

//!				•	Do not use authentication.

//!				•	Submit a key association.

//!				•	Query the SADB on the key association.

//! @SYMTestExpectedResults 	• 	The key association should be in SADB.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E011

RUN_TEST_STEP 100 tscaf SCAFIpSecSadbVerification z:\tcaf\tscaf\tscaf.ini ipsec_no_authentication

END_TESTCASE SEC-SCAF-E011

//! @SYMTestCaseID 		SEC-SCAF-E013

//! @SYMTestCaseDesc 		IPSec - unsupported algorithms

//! 				(ipsec_unsupported_algorithms)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 	

//!				•	Create an IPSec key stream sink as detailed in SEC-SCAF-A001.

//!				•	Try setting any encryption algorithm which is not AES-CBC.

//!				•	Try setting any authentication algorithm which is not NULL or HMAC-SHA1.

//! @SYMTestExpectedResults 	• 	KErrNotSupported should be returned each time.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E013

RUN_TEST_STEP !Result=-5 100 tscaf SCAFIpSec z:\tcaf\tscaf\tscaf.ini ipsec_wrong_enc_algorithm1

RUN_TEST_STEP !Result=-5 100 tscaf SCAFIpSec z:\tcaf\tscaf\tscaf.ini ipsec_wrong_enc_algorithm2

RUN_TEST_STEP !Result=-5 100 tscaf SCAFIpSec z:\tcaf\tscaf\tscaf.ini ipsec_wrong_enc_algorithm3

RUN_TEST_STEP !Result=-5 100 tscaf SCAFIpSec z:\tcaf\tscaf\tscaf.ini ipsec_wrong_auth_algorithm

END_TESTCASE SEC-SCAF-E013

//! @SYMTestCaseID 		SEC-SCAF-E014

//! @SYMTestCaseDesc 		Multiple IPSec key stream sinks

//! 				(ipsec_multiple_sinks)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 	

//!				•	Same as with SEC-SCAF-E002, but using a separate key stream sink for each association.

//! @SYMTestExpectedResults 	• 	Expected SA entries match when queried from SADB.

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E014

RUN_TEST_STEP 200 tscaf SCAFIpSecMultipleSinks z:\tcaf\tscaf\tscaf.ini ipsec_multiple_sinks

END_TESTCASE SEC-SCAF-E014

//! @SYMTestCaseID 		SEC-SCAF-E015

//! @SYMTestCaseDesc 		Testing IPSec integration with key stream decoder - automatic

//! 				(ipsec_integration_decoder_automatic)

//! @SYMPREQ 			PREQ782

//! @SYMREQ 			REQ7779

//! @SYMTestPriority 		High

//! @SYMTestStatus   		Implemented

//! @SYMTestActions 		

//!				•	Create manually a test agent key stream decoder using SDP information

//!				•	Take care to supply an IPSec key stream sink as detailed in SEC-SCAF-E001.

//!				•	Send the key association for the test agent. The key association is as defined in step SEC-SCAF-E004.

//!				•	Verify with SADB_GET that associations was added 

//!

//! @SYMTestExpectedResults 	• Associations was added 

//! @SYMTestType 		CIT

START_TESTCASE SEC-SCAF-E015

RUN_TEST_STEP tscaf SCAFSetupRightsObjects z:\tcaf\tscaf\tscaf.ini Rights_Program

// The time limit is disabled since this test is manual

RUN_TEST_STEP -1 tscaf SCAFIpSecDecoderIntegration z:\tcaf\tscaf\tscaf.ini ipsec_integration_decoder_automatic

END_TESTCASE SEC-SCAF-E015