/testing/guestbin/swan-prep west # rm /etc/ipsec.d/*db west # ipsec initnss > /dev/null 2> /dev/null west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec whack --impair revival west # ipsec auto --add westnet-eastnet 002 added connection description "westnet-eastnet" west # echo "initdone" initdone west # ipsec whack --impair suppress-retransmits west # # this is expected to fail to our own misconfigured key west # ipsec auto --up westnet-eastnet 002 "westnet-eastnet" #1: initiating Main Mode 1v1 "westnet-eastnet" #1: STATE_MAIN_I1: initiate 1v1 "westnet-eastnet" #1: STATE_MAIN_I2: sent MI2, expecting MR2 003 "westnet-eastnet" #1: Can't find the certificate or private key from the NSS CKA_ID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED 002 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: Can't find the certificate or private key from the NSS CKA_ID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED 002 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: Can't find the certificate or private key from the NSS CKA_ID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED 002 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: Can't find the certificate or private key from the NSS CKA_ID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED 002 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: Can't find the certificate or private key from the NSS CKA_ID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED 002 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: Can't find the certificate or private key from the NSS CKA_ID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED 002 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 002 "westnet-eastnet" #1: deleting state (STATE_MAIN_I2) and NOT sending notification 002 "westnet-eastnet" #1: IMPAIR: skipping revival of connection 'westnet-eastnet' that is supposed to remain up west # # we should not see any leftover states west # ipsec status |grep STATE_ west # echo done done west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi