Add automated StrongSwan test

server/site_wifitest.py

 # Copyright (c) 2011 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import common, datetime, fnmatch, logging, os, re, string, threading, time
 
 from autotest_lib.server import autotest, hosts, subcommand
 from autotest_lib.server import site_bsd_router
 from autotest_lib.server import site_linux_router
 from autotest_lib.server import site_linux_server
@@ skipping 124 matching lines @@
             self.server = hosts.create_host(server['addr'])
             self.server_at = autotest.Autotest(self.server)
             # if not specified assume the same as the control address
             self.server_wifi_ip = server.get('wifi_addr', self.server.ip)
             self.__server_discover_commands(server)
         else:
             self.server = None
             # NB: wifi address must be set if not reachable from control
             self.server_wifi_ip = server['wifi_addr']
 
-        # hosting_server is a machine which hosts network services,
-        # such as VPN.
+        # The 'hosting_server' is a machine which hosts network
+        # services, such as OpenVPN or StrongSwan.
         self.hosting_server = site_linux_server.LinuxServer(self.server, server)
 
         # potential bg thread for ping untilstop
         self.ping_thread = None
 
         # potential bg thread for client network monitoring
         self.client_netdump_thread = None
         self.__client_discover_commands(client)
         self.profile_save({})
         self.firewall_rules = []
@@ skipping 1090 matching lines @@
                                      'openvpn vpn-name %s vpn-domain '
                                      '%s '   # ca certificate
                                      '%s '   # client certificate
                                      '%s' %  # client key
                                      (self.client_cmd_flimflam_lib,
                                       remote_cert_tls_option,
                                       vpn_host_ip,
                                       cert_pathnames['ca-certificate'],
                                       cert_pathnames['client-certificate'],
                                       cert_pathnames['client-key']))
+        elif self.vpn_kind == 'l2tpipsec-psk': # aka 'strongswan'

[Sam Leffler, 2011/03/31 17:11:27]

We've tried hard to not have explicit builtin code like this.  Can you try to
factor the l2tp-specific work out into a subclass or something similar so this
doesn't grow when the next hard to support vpn setup requires something similar?

+            result = self.client.run('%s/test/connect-vpn '
+                                     '--verbose '
+                                     'l2tpipsec-psk vpn-name %s vpn-domain '
+                                     'password chapuser chapsecret'  %
+                                     (self.client_cmd_flimflam_lib,
+                                      vpn_host_ip))
         else:
             raise error.TestFail('(internal error): No launch case '
                                  'for VPN kind (%s)' % self.vpn_kind)
 
     def vpn_client_kill(self, params):
         """ Kill the VPN client if it's running. """
         if self.vpn_kind is not None:

[Sam Leffler, 2011/03/31 17:11:27]

see above, it might be time to factor out vpn support into it's own class(es)

             if self.vpn_kind == 'openvpn':
                 self.client.run("pkill openvpn")
+            elif (self.vpn_kind == 'l2tpipsec-psk' or  # aka 'strongswan'
+                  self.vpn_kind == 'l2tpipsec-cert')
+                self.client.run("pkill /usr/libexec/ipsec/pluto")
+                self.client.run("pkill /usr/libexec/ipsec/starter")
+                self.client.run("pkill _pluto_adns")
+                self.client.run("pkill /usr/sbin/pppd")
+                self.client.run("pkill /usr/sbin/xl2tpd")
+                self.client.run("pkill /usr/sbin/l2tpipsec_vpn")
             else:
                 raise error.TestFail('(internal error): No kill case '
                                      'for VPN kind (%s)' % self.vpn_kind)
             self.vpn_kind = None
 
 class HelperThread(threading.Thread):
     # Class that wraps a ping command in a thread so it can run in the bg.
     def __init__(self, client, cmd):
         threading.Thread.__init__(self)
         self.client = client
@@ skipping 119 matching lines @@
     except error.TestFail:
       if 'expect_failure' in testcase:
         self.expect_failure(name, testcase['expect_failure'])
       else:
         raise
     except Exception, e:
       if 'expect_failure' in testcase:
         self.expect_failure(name, testcase['expect_failure'])
       else:
         raise