Aug 26 13:08:26.665566: FIPS Product: YES Aug 26 13:08:26.665613: FIPS Kernel: NO Aug 26 13:08:26.665616: FIPS Mode: NO Aug 26 13:08:26.665619: NSS DB directory: sql:/etc/ipsec.d Aug 26 13:08:26.665769: Initializing NSS Aug 26 13:08:26.665776: Opening NSS database "sql:/etc/ipsec.d" read-only Aug 26 13:08:26.713646: NSS initialized Aug 26 13:08:26.713660: NSS crypto library initialized Aug 26 13:08:26.713663: FIPS HMAC integrity support [enabled] Aug 26 13:08:26.713665: FIPS mode disabled for pluto daemon Aug 26 13:08:26.767130: FIPS HMAC integrity verification self-test FAILED Aug 26 13:08:26.767235: libcap-ng support [enabled] Aug 26 13:08:26.767245: Linux audit support [enabled] Aug 26 13:08:26.767294: Linux audit activated Aug 26 13:08:26.767308: Starting Pluto (Libreswan Version v3.28-685-gbfd5aef521-master-s2 XFRM(netkey) esp-hw-offload FORK PTHREAD_SETSCHEDPRIO NSS (IPsec profile) DNSSEC FIPS_CHECK LABELED_IPSEC SECCOMP LIBCAP_NG LINUX_AUDIT XAUTH_PAM NETWORKMANAGER CURL(non-NSS)) pid:3369 Aug 26 13:08:26.767312: core dump dir: /tmp Aug 26 13:08:26.767315: secrets file: /etc/ipsec.secrets Aug 26 13:08:26.767317: leak-detective enabled Aug 26 13:08:26.767319: NSS crypto [enabled] Aug 26 13:08:26.767321: XAUTH PAM support [enabled] Aug 26 13:08:26.767399: | libevent is using pluto's memory allocator Aug 26 13:08:26.767407: Initializing libevent in pthreads mode: headers: 2.1.8-stable (2010800); library: 2.1.8-stable (2010800) Aug 26 13:08:26.767424: | libevent_malloc: new ptr-libevent@0x561816dc5188 size 40 Aug 26 13:08:26.767433: | libevent_malloc: new ptr-libevent@0x561816dbfcd8 size 40 Aug 26 13:08:26.767437: | libevent_malloc: new ptr-libevent@0x561816dbfdd8 size 40 Aug 26 13:08:26.767440: | creating event base Aug 26 13:08:26.767444: | libevent_malloc: new ptr-libevent@0x561816e42358 size 56 Aug 26 13:08:26.767450: | libevent_malloc: new ptr-libevent@0x561816deef58 size 664 Aug 26 13:08:26.767462: | libevent_malloc: new ptr-libevent@0x561816e423c8 size 24 Aug 26 13:08:26.767465: | libevent_malloc: new ptr-libevent@0x561816e42418 size 384 Aug 26 13:08:26.767476: | libevent_malloc: new ptr-libevent@0x561816e42318 size 16 Aug 26 13:08:26.767479: | libevent_malloc: new ptr-libevent@0x561816dbf908 size 40 Aug 26 13:08:26.767483: | libevent_malloc: new ptr-libevent@0x561816dbfd38 size 48 Aug 26 13:08:26.767489: | libevent_realloc: new ptr-libevent@0x561816deebe8 size 256 Aug 26 13:08:26.767492: | libevent_malloc: new ptr-libevent@0x561816e425c8 size 16 Aug 26 13:08:26.767498: | libevent_free: release ptr-libevent@0x561816e42358 Aug 26 13:08:26.767502: | libevent initialized Aug 26 13:08:26.767506: | libevent_realloc: new ptr-libevent@0x561816e42358 size 64 Aug 26 13:08:26.767513: | global periodic timer EVENT_RESET_LOG_RATE_LIMIT enabled with interval of 3600 seconds Aug 26 13:08:26.767529: | init_nat_traversal() initialized with keep_alive=0s Aug 26 13:08:26.767532: NAT-Traversal support [enabled] Aug 26 13:08:26.767535: | global one-shot timer EVENT_NAT_T_KEEPALIVE initialized Aug 26 13:08:26.767541: | global one-shot timer EVENT_FREE_ROOT_CERTS initialized Aug 26 13:08:26.767545: | global periodic timer EVENT_REINIT_SECRET enabled with interval of 3600 seconds Aug 26 13:08:26.767579: | global one-shot timer EVENT_REVIVE_CONNS initialized Aug 26 13:08:26.767583: | global periodic timer EVENT_PENDING_DDNS enabled with interval of 60 seconds Aug 26 13:08:26.767588: | global periodic timer EVENT_PENDING_PHASE2 enabled with interval of 120 seconds Aug 26 13:08:26.767640: Encryption algorithms: Aug 26 13:08:26.767648: AES_CCM_16 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm, aes_ccm_c Aug 26 13:08:26.767653: AES_CCM_12 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_b Aug 26 13:08:26.767657: AES_CCM_8 IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_ccm_a Aug 26 13:08:26.767661: 3DES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS [*192] 3des Aug 26 13:08:26.767664: CAMELLIA_CTR IKEv1: ESP IKEv2: ESP {256,192,*128} Aug 26 13:08:26.767674: CAMELLIA_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} camellia Aug 26 13:08:26.767679: AES_GCM_16 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm, aes_gcm_c Aug 26 13:08:26.767683: AES_GCM_12 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_b Aug 26 13:08:26.767687: AES_GCM_8 IKEv1: ESP IKEv2: IKE ESP FIPS {256,192,*128} aes_gcm_a Aug 26 13:08:26.767691: AES_CTR IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aesctr Aug 26 13:08:26.767695: AES_CBC IKEv1: IKE ESP IKEv2: IKE ESP FIPS {256,192,*128} aes Aug 26 13:08:26.767699: SERPENT_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} serpent Aug 26 13:08:26.767703: TWOFISH_CBC IKEv1: IKE ESP IKEv2: IKE ESP {256,192,*128} twofish Aug 26 13:08:26.767708: TWOFISH_SSH IKEv1: IKE IKEv2: IKE ESP {256,192,*128} twofish_cbc_ssh Aug 26 13:08:26.767712: NULL_AUTH_AES_GMAC IKEv1: ESP IKEv2: ESP FIPS {256,192,*128} aes_gmac Aug 26 13:08:26.767715: NULL IKEv1: ESP IKEv2: ESP [] Aug 26 13:08:26.767718: CHACHA20_POLY1305 IKEv1: IKEv2: IKE ESP [*256] chacha20poly1305 Aug 26 13:08:26.767725: Hash algorithms: Aug 26 13:08:26.767729: MD5 IKEv1: IKE IKEv2: Aug 26 13:08:26.767732: SHA1 IKEv1: IKE IKEv2: FIPS sha Aug 26 13:08:26.767736: SHA2_256 IKEv1: IKE IKEv2: FIPS sha2, sha256 Aug 26 13:08:26.767739: SHA2_384 IKEv1: IKE IKEv2: FIPS sha384 Aug 26 13:08:26.767743: SHA2_512 IKEv1: IKE IKEv2: FIPS sha512 Aug 26 13:08:26.767757: PRF algorithms: Aug 26 13:08:26.767760: HMAC_MD5 IKEv1: IKE IKEv2: IKE md5 Aug 26 13:08:26.767764: HMAC_SHA1 IKEv1: IKE IKEv2: IKE FIPS sha, sha1 Aug 26 13:08:26.767768: HMAC_SHA2_256 IKEv1: IKE IKEv2: IKE FIPS sha2, sha256, sha2_256 Aug 26 13:08:26.767771: HMAC_SHA2_384 IKEv1: IKE IKEv2: IKE FIPS sha384, sha2_384 Aug 26 13:08:26.767774: HMAC_SHA2_512 IKEv1: IKE IKEv2: IKE FIPS sha512, sha2_512 Aug 26 13:08:26.767778: AES_XCBC IKEv1: IKEv2: IKE aes128_xcbc Aug 26 13:08:26.767804: Integrity algorithms: Aug 26 13:08:26.767808: HMAC_MD5_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH md5, hmac_md5 Aug 26 13:08:26.767812: HMAC_SHA1_96 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha, sha1, sha1_96, hmac_sha1 Aug 26 13:08:26.767816: HMAC_SHA2_512_256 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha512, sha2_512, sha2_512_256, hmac_sha2_512 Aug 26 13:08:26.767820: HMAC_SHA2_384_192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha384, sha2_384, sha2_384_192, hmac_sha2_384 Aug 26 13:08:26.767824: HMAC_SHA2_256_128 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS sha2, sha256, sha2_256, sha2_256_128, hmac_sha2_256 Aug 26 13:08:26.767827: HMAC_SHA2_256_TRUNCBUG IKEv1: ESP AH IKEv2: AH Aug 26 13:08:26.767831: AES_XCBC_96 IKEv1: ESP AH IKEv2: IKE ESP AH aes_xcbc, aes128_xcbc, aes128_xcbc_96 Aug 26 13:08:26.767834: AES_CMAC_96 IKEv1: ESP AH IKEv2: ESP AH FIPS aes_cmac Aug 26 13:08:26.767837: NONE IKEv1: ESP IKEv2: IKE ESP FIPS null Aug 26 13:08:26.767850: DH algorithms: Aug 26 13:08:26.767854: NONE IKEv1: IKEv2: IKE ESP AH FIPS null, dh0 Aug 26 13:08:26.767857: MODP1536 IKEv1: IKE ESP AH IKEv2: IKE ESP AH dh5 Aug 26 13:08:26.767860: MODP2048 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh14 Aug 26 13:08:26.767867: MODP3072 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh15 Aug 26 13:08:26.767871: MODP4096 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh16 Aug 26 13:08:26.767874: MODP6144 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh17 Aug 26 13:08:26.767877: MODP8192 IKEv1: IKE ESP AH IKEv2: IKE ESP AH FIPS dh18 Aug 26 13:08:26.767880: DH19 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_256, ecp256 Aug 26 13:08:26.767884: DH20 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_384, ecp384 Aug 26 13:08:26.767887: DH21 IKEv1: IKE IKEv2: IKE ESP AH FIPS ecp_521, ecp521 Aug 26 13:08:26.767890: DH31 IKEv1: IKE IKEv2: IKE ESP AH curve25519 Aug 26 13:08:26.767893: testing CAMELLIA_CBC: Aug 26 13:08:26.767896: Camellia: 16 bytes with 128-bit key Aug 26 13:08:26.768025: Camellia: 16 bytes with 128-bit key Aug 26 13:08:26.768058: Camellia: 16 bytes with 256-bit key Aug 26 13:08:26.768090: Camellia: 16 bytes with 256-bit key Aug 26 13:08:26.768120: testing AES_GCM_16: Aug 26 13:08:26.768124: empty string Aug 26 13:08:26.768153: one block Aug 26 13:08:26.768182: two blocks Aug 26 13:08:26.768210: two blocks with associated data Aug 26 13:08:26.768237: testing AES_CTR: Aug 26 13:08:26.768241: Encrypting 16 octets using AES-CTR with 128-bit key Aug 26 13:08:26.768269: Encrypting 32 octets using AES-CTR with 128-bit key Aug 26 13:08:26.768304: Encrypting 36 octets using AES-CTR with 128-bit key Aug 26 13:08:26.768340: Encrypting 16 octets using AES-CTR with 192-bit key Aug 26 13:08:26.768368: Encrypting 32 octets using AES-CTR with 192-bit key Aug 26 13:08:26.768397: Encrypting 36 octets using AES-CTR with 192-bit key Aug 26 13:08:26.768427: Encrypting 16 octets using AES-CTR with 256-bit key Aug 26 13:08:26.768455: Encrypting 32 octets using AES-CTR with 256-bit key Aug 26 13:08:26.768485: Encrypting 36 octets using AES-CTR with 256-bit key Aug 26 13:08:26.768514: testing AES_CBC: Aug 26 13:08:26.768518: Encrypting 16 bytes (1 block) using AES-CBC with 128-bit key Aug 26 13:08:26.768547: Encrypting 32 bytes (2 blocks) using AES-CBC with 128-bit key Aug 26 13:08:26.768578: Encrypting 48 bytes (3 blocks) using AES-CBC with 128-bit key Aug 26 13:08:26.768607: Encrypting 64 bytes (4 blocks) using AES-CBC with 128-bit key Aug 26 13:08:26.768642: testing AES_XCBC: Aug 26 13:08:26.768646: RFC 3566 Test Case #1: AES-XCBC-MAC-96 with 0-byte input Aug 26 13:08:26.768766: RFC 3566 Test Case #2: AES-XCBC-MAC-96 with 3-byte input Aug 26 13:08:26.768907: RFC 3566 Test Case #3: AES-XCBC-MAC-96 with 16-byte input Aug 26 13:08:26.769040: RFC 3566 Test Case #4: AES-XCBC-MAC-96 with 20-byte input Aug 26 13:08:26.769174: RFC 3566 Test Case #5: AES-XCBC-MAC-96 with 32-byte input Aug 26 13:08:26.769311: RFC 3566 Test Case #6: AES-XCBC-MAC-96 with 34-byte input Aug 26 13:08:26.769453: RFC 3566 Test Case #7: AES-XCBC-MAC-96 with 1000-byte input Aug 26 13:08:26.769757: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 16) Aug 26 13:08:26.769896: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 10) Aug 26 13:08:26.770037: RFC 4434 Test Case AES-XCBC-PRF-128 with 20-byte input (key length 18) Aug 26 13:08:26.770274: testing HMAC_MD5: Aug 26 13:08:26.770280: RFC 2104: MD5_HMAC test 1 Aug 26 13:08:26.770459: RFC 2104: MD5_HMAC test 2 Aug 26 13:08:26.770628: RFC 2104: MD5_HMAC test 3 Aug 26 13:08:26.770836: 8 CPU cores online Aug 26 13:08:26.770842: starting up 7 crypto helpers Aug 26 13:08:26.770879: started thread for crypto helper 0 Aug 26 13:08:26.770903: started thread for crypto helper 1 Aug 26 13:08:26.770909: | starting up helper thread 1 Aug 26 13:08:26.770930: started thread for crypto helper 2 Aug 26 13:08:26.770937: | starting up helper thread 2 Aug 26 13:08:26.770948: | status value returned by setting the priority of this thread (crypto helper 2) 22 Aug 26 13:08:26.770956: | crypto helper 2 waiting (nothing to do) Aug 26 13:08:26.770931: | status value returned by setting the priority of this thread (crypto helper 1) 22 Aug 26 13:08:26.770964: | crypto helper 1 waiting (nothing to do) Aug 26 13:08:26.771137: | starting up helper thread 0 Aug 26 13:08:26.771277: | status value returned by setting the priority of this thread (crypto helper 0) 22 Aug 26 13:08:26.771281: | crypto helper 0 waiting (nothing to do) Aug 26 13:08:26.771325: started thread for crypto helper 3 Aug 26 13:08:26.771352: started thread for crypto helper 4 Aug 26 13:08:26.771374: started thread for crypto helper 5 Aug 26 13:08:26.771397: started thread for crypto helper 6 Aug 26 13:08:26.771406: | checking IKEv1 state table Aug 26 13:08:26.771413: | MAIN_R0: category: half-open IKE SA flags: 0: Aug 26 13:08:26.771417: | -> MAIN_R1 EVENT_SO_DISCARD Aug 26 13:08:26.771420: | MAIN_I1: category: half-open IKE SA flags: 0: Aug 26 13:08:26.771422: | -> MAIN_I2 EVENT_RETRANSMIT Aug 26 13:08:26.771425: | MAIN_R1: category: open IKE SA flags: 200: Aug 26 13:08:26.771428: | -> MAIN_R2 EVENT_RETRANSMIT Aug 26 13:08:26.771430: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 13:08:26.771433: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 13:08:26.771436: | MAIN_I2: category: open IKE SA flags: 0: Aug 26 13:08:26.771438: | -> MAIN_I3 EVENT_RETRANSMIT Aug 26 13:08:26.771441: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 13:08:26.771443: | -> UNDEFINED EVENT_RETRANSMIT Aug 26 13:08:26.771446: | MAIN_R2: category: open IKE SA flags: 0: Aug 26 13:08:26.771449: | -> MAIN_R3 EVENT_SA_REPLACE Aug 26 13:08:26.771451: | -> MAIN_R3 EVENT_SA_REPLACE Aug 26 13:08:26.771453: | -> UNDEFINED EVENT_SA_REPLACE Aug 26 13:08:26.771456: | MAIN_I3: category: open IKE SA flags: 0: Aug 26 13:08:26.771459: | -> MAIN_I4 EVENT_SA_REPLACE Aug 26 13:08:26.771461: | -> MAIN_I4 EVENT_SA_REPLACE Aug 26 13:08:26.771464: | -> UNDEFINED EVENT_SA_REPLACE Aug 26 13:08:26.771467: | MAIN_R3: category: established IKE SA flags: 200: Aug 26 13:08:26.771469: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771472: | MAIN_I4: category: established IKE SA flags: 0: Aug 26 13:08:26.771475: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771478: | AGGR_R0: category: half-open IKE SA flags: 0: Aug 26 13:08:26.771480: | -> AGGR_R1 EVENT_SO_DISCARD Aug 26 13:08:26.771483: | AGGR_I1: category: half-open IKE SA flags: 0: Aug 26 13:08:26.771486: | -> AGGR_I2 EVENT_SA_REPLACE Aug 26 13:08:26.771488: | -> AGGR_I2 EVENT_SA_REPLACE Aug 26 13:08:26.771491: | AGGR_R1: category: open IKE SA flags: 200: Aug 26 13:08:26.771493: | -> AGGR_R2 EVENT_SA_REPLACE Aug 26 13:08:26.771496: | -> AGGR_R2 EVENT_SA_REPLACE Aug 26 13:08:26.771499: | AGGR_I2: category: established IKE SA flags: 200: Aug 26 13:08:26.771501: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771504: | AGGR_R2: category: established IKE SA flags: 0: Aug 26 13:08:26.771507: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771510: | QUICK_R0: category: established CHILD SA flags: 0: Aug 26 13:08:26.771512: | -> QUICK_R1 EVENT_RETRANSMIT Aug 26 13:08:26.771515: | QUICK_I1: category: established CHILD SA flags: 0: Aug 26 13:08:26.771518: | -> QUICK_I2 EVENT_SA_REPLACE Aug 26 13:08:26.771521: | QUICK_R1: category: established CHILD SA flags: 0: Aug 26 13:08:26.771523: | -> QUICK_R2 EVENT_SA_REPLACE Aug 26 13:08:26.771526: | QUICK_I2: category: established CHILD SA flags: 200: Aug 26 13:08:26.771529: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771532: | QUICK_R2: category: established CHILD SA flags: 0: Aug 26 13:08:26.771534: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771537: | INFO: category: informational flags: 0: Aug 26 13:08:26.771540: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771543: | INFO_PROTECTED: category: informational flags: 0: Aug 26 13:08:26.771545: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.771548: | XAUTH_R0: category: established IKE SA flags: 0: Aug 26 13:08:26.771554: | -> XAUTH_R1 EVENT_NULL Aug 26 13:08:26.771558: | XAUTH_R1: category: established IKE SA flags: 0: Aug 26 13:08:26.771560: | -> MAIN_R3 EVENT_SA_REPLACE Aug 26 13:08:26.771563: | MODE_CFG_R0: category: informational flags: 0: Aug 26 13:08:26.771565: | -> MODE_CFG_R1 EVENT_SA_REPLACE Aug 26 13:08:26.771568: | MODE_CFG_R1: category: established IKE SA flags: 0: Aug 26 13:08:26.771571: | -> MODE_CFG_R2 EVENT_SA_REPLACE Aug 26 13:08:26.771573: | starting up helper thread 3 Aug 26 13:08:26.771589: | status value returned by setting the priority of this thread (crypto helper 3) 22 Aug 26 13:08:26.771593: | crypto helper 3 waiting (nothing to do) Aug 26 13:08:26.771599: | starting up helper thread 4 Aug 26 13:08:26.771605: | status value returned by setting the priority of this thread (crypto helper 4) 22 Aug 26 13:08:26.771608: | crypto helper 4 waiting (nothing to do) Aug 26 13:08:26.771613: | starting up helper thread 5 Aug 26 13:08:26.771619: | status value returned by setting the priority of this thread (crypto helper 5) 22 Aug 26 13:08:26.771622: | crypto helper 5 waiting (nothing to do) Aug 26 13:08:26.771627: | starting up helper thread 6 Aug 26 13:08:26.771632: | status value returned by setting the priority of this thread (crypto helper 6) 22 Aug 26 13:08:26.771636: | crypto helper 6 waiting (nothing to do) Aug 26 13:08:26.771574: | MODE_CFG_R2: category: established IKE SA flags: 0: Aug 26 13:08:26.774322: | -> UNDEFINED EVENT_NULL Aug 26 13:08:26.774327: | MODE_CFG_I1: category: established IKE SA flags: 0: Aug 26 13:08:26.774329: | -> MAIN_I4 EVENT_SA_REPLACE Aug 26 13:08:26.774332: | XAUTH_I0: category: established IKE SA flags: 0: Aug 26 13:08:26.774335: | -> XAUTH_I1 EVENT_RETRANSMIT Aug 26 13:08:26.774338: | XAUTH_I1: category: established IKE SA flags: 0: Aug 26 13:08:26.774341: | -> MAIN_I4 EVENT_RETRANSMIT Aug 26 13:08:26.774347: | checking IKEv2 state table Aug 26 13:08:26.774354: | PARENT_I0: category: ignore flags: 0: Aug 26 13:08:26.774357: | -> PARENT_I1 EVENT_RETRANSMIT send-request (initiate IKE_SA_INIT) Aug 26 13:08:26.774360: | PARENT_I1: category: half-open IKE SA flags: 0: Aug 26 13:08:26.774363: | -> PARENT_I1 EVENT_RETAIN send-request (Initiator: process SA_INIT reply notification) Aug 26 13:08:26.774367: | -> PARENT_I2 EVENT_RETRANSMIT send-request (Initiator: process IKE_SA_INIT reply, initiate IKE_AUTH) Aug 26 13:08:26.774370: | PARENT_I2: category: open IKE SA flags: 0: Aug 26 13:08:26.774373: | -> PARENT_I2 EVENT_NULL (Initiator: process INVALID_SYNTAX AUTH notification) Aug 26 13:08:26.774375: | -> PARENT_I2 EVENT_NULL (Initiator: process AUTHENTICATION_FAILED AUTH notification) Aug 26 13:08:26.774378: | -> PARENT_I2 EVENT_NULL (Initiator: process UNSUPPORTED_CRITICAL_PAYLOAD AUTH notification) Aug 26 13:08:26.774381: | -> V2_IPSEC_I EVENT_SA_REPLACE (Initiator: process IKE_AUTH response) Aug 26 13:08:26.774384: | -> PARENT_I2 EVENT_NULL (IKE SA: process IKE_AUTH response containing unknown notification) Aug 26 13:08:26.774387: | PARENT_I3: category: established IKE SA flags: 0: Aug 26 13:08:26.774390: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Request) Aug 26 13:08:26.774393: | -> PARENT_I3 EVENT_RETAIN (I3: Informational Response) Aug 26 13:08:26.774395: | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Request) Aug 26 13:08:26.774398: | -> PARENT_I3 EVENT_RETAIN (I3: INFORMATIONAL Response) Aug 26 13:08:26.774401: | PARENT_R0: category: half-open IKE SA flags: 0: Aug 26 13:08:26.774404: | -> PARENT_R1 EVENT_SO_DISCARD send-request (Respond to IKE_SA_INIT) Aug 26 13:08:26.774407: | PARENT_R1: category: half-open IKE SA flags: 0: Aug 26 13:08:26.774410: | -> PARENT_R1 EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request (no SKEYSEED)) Aug 26 13:08:26.774413: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Responder: process IKE_AUTH request) Aug 26 13:08:26.774416: | PARENT_R2: category: established IKE SA flags: 0: Aug 26 13:08:26.774419: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Request) Aug 26 13:08:26.774427: | -> PARENT_R2 EVENT_RETAIN (R2: process Informational Response) Aug 26 13:08:26.774430: | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Request) Aug 26 13:08:26.774432: | -> PARENT_R2 EVENT_RETAIN (R2: process INFORMATIONAL Response) Aug 26 13:08:26.774435: | V2_CREATE_I0: category: established IKE SA flags: 0: Aug 26 13:08:26.774438: | -> V2_CREATE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec SA) Aug 26 13:08:26.774441: | V2_CREATE_I: category: established IKE SA flags: 0: Aug 26 13:08:26.774444: | -> V2_IPSEC_I EVENT_SA_REPLACE (Process CREATE_CHILD_SA IPsec SA Response) Aug 26 13:08:26.774447: | V2_REKEY_IKE_I0: category: established IKE SA flags: 0: Aug 26 13:08:26.774450: | -> V2_REKEY_IKE_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IKE Rekey) Aug 26 13:08:26.774453: | V2_REKEY_IKE_I: category: established IKE SA flags: 0: Aug 26 13:08:26.774456: | -> PARENT_I3 EVENT_SA_REPLACE (Process CREATE_CHILD_SA IKE Rekey Response) Aug 26 13:08:26.774459: | V2_REKEY_CHILD_I0: category: established IKE SA flags: 0: Aug 26 13:08:26.774462: | -> V2_REKEY_CHILD_I EVENT_RETRANSMIT send-request (Initiate CREATE_CHILD_SA IPsec Rekey SA) Aug 26 13:08:26.774465: | V2_REKEY_CHILD_I: category: established IKE SA flags: 0: Aug 26 13:08:26.774468: | V2_CREATE_R: category: established IKE SA flags: 0: Aug 26 13:08:26.774471: | -> V2_IPSEC_R EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IPsec SA Request) Aug 26 13:08:26.774474: | V2_REKEY_IKE_R: category: established IKE SA flags: 0: Aug 26 13:08:26.774477: | -> PARENT_R2 EVENT_SA_REPLACE send-request (Respond to CREATE_CHILD_SA IKE Rekey) Aug 26 13:08:26.774480: | V2_REKEY_CHILD_R: category: established IKE SA flags: 0: Aug 26 13:08:26.774483: | V2_IPSEC_I: category: established CHILD SA flags: 0: Aug 26 13:08:26.774486: | V2_IPSEC_R: category: established CHILD SA flags: 0: Aug 26 13:08:26.774489: | IKESA_DEL: category: established IKE SA flags: 0: Aug 26 13:08:26.774492: | -> IKESA_DEL EVENT_RETAIN (IKE_SA_DEL: process INFORMATIONAL) Aug 26 13:08:26.774495: | CHILDSA_DEL: category: informational flags: 0: Aug 26 13:08:26.774512: Using Linux XFRM/NETKEY IPsec interface code on 5.1.18-200.fc29.x86_64 Aug 26 13:08:26.774581: | Hard-wiring algorithms Aug 26 13:08:26.774585: | adding AES_CCM_16 to kernel algorithm db Aug 26 13:08:26.774590: | adding AES_CCM_12 to kernel algorithm db Aug 26 13:08:26.774593: | adding AES_CCM_8 to kernel algorithm db Aug 26 13:08:26.774596: | adding 3DES_CBC to kernel algorithm db Aug 26 13:08:26.774598: | adding CAMELLIA_CBC to kernel algorithm db Aug 26 13:08:26.774601: | adding AES_GCM_16 to kernel algorithm db Aug 26 13:08:26.774604: | adding AES_GCM_12 to kernel algorithm db Aug 26 13:08:26.774606: | adding AES_GCM_8 to kernel algorithm db Aug 26 13:08:26.774609: | adding AES_CTR to kernel algorithm db Aug 26 13:08:26.774611: | adding AES_CBC to kernel algorithm db Aug 26 13:08:26.774614: | adding SERPENT_CBC to kernel algorithm db Aug 26 13:08:26.774617: | adding TWOFISH_CBC to kernel algorithm db Aug 26 13:08:26.774620: | adding NULL_AUTH_AES_GMAC to kernel algorithm db Aug 26 13:08:26.774622: | adding NULL to kernel algorithm db Aug 26 13:08:26.774625: | adding CHACHA20_POLY1305 to kernel algorithm db Aug 26 13:08:26.774628: | adding HMAC_MD5_96 to kernel algorithm db Aug 26 13:08:26.774631: | adding HMAC_SHA1_96 to kernel algorithm db Aug 26 13:08:26.774633: | adding HMAC_SHA2_512_256 to kernel algorithm db Aug 26 13:08:26.774636: | adding HMAC_SHA2_384_192 to kernel algorithm db Aug 26 13:08:26.774639: | adding HMAC_SHA2_256_128 to kernel algorithm db Aug 26 13:08:26.774641: | adding HMAC_SHA2_256_TRUNCBUG to kernel algorithm db Aug 26 13:08:26.774644: | adding AES_XCBC_96 to kernel algorithm db Aug 26 13:08:26.774646: | adding AES_CMAC_96 to kernel algorithm db Aug 26 13:08:26.774649: | adding NONE to kernel algorithm db Aug 26 13:08:26.774674: | net.ipv6.conf.all.disable_ipv6=1 ignore ipv6 holes Aug 26 13:08:26.774681: | global periodic timer EVENT_SHUNT_SCAN enabled with interval of 20 seconds Aug 26 13:08:26.774684: | setup kernel fd callback Aug 26 13:08:26.774687: | add_fd_read_event_handler: new KERNEL_XRM_FD-pe@0x561816e47bd8 Aug 26 13:08:26.774693: | libevent_malloc: new ptr-libevent@0x561816e2b478 size 128 Aug 26 13:08:26.774696: | libevent_malloc: new ptr-libevent@0x561816e47138 size 16 Aug 26 13:08:26.774703: | add_fd_read_event_handler: new KERNEL_ROUTE_FD-pe@0x561816e47028 Aug 26 13:08:26.774706: | libevent_malloc: new ptr-libevent@0x561816df2058 size 128 Aug 26 13:08:26.774709: | libevent_malloc: new ptr-libevent@0x561816e47b28 size 16 Aug 26 13:08:26.777030: | global one-shot timer EVENT_CHECK_CRLS initialized Aug 26 13:08:26.777050: selinux support is enabled. Aug 26 13:08:26.777766: | unbound context created - setting debug level to 5 Aug 26 13:08:26.777811: | /etc/hosts lookups activated Aug 26 13:08:26.777827: | /etc/resolv.conf usage activated Aug 26 13:08:26.777896: | outgoing-port-avoid set 0-65535 Aug 26 13:08:26.777928: | outgoing-port-permit set 32768-60999 Aug 26 13:08:26.777932: | Loading dnssec root key from:/var/lib/unbound/root.key Aug 26 13:08:26.777935: | No additional dnssec trust anchors defined via dnssec-trusted= option Aug 26 13:08:26.777939: | Setting up events, loop start Aug 26 13:08:26.777943: | add_fd_read_event_handler: new PLUTO_CTL_FD-pe@0x561816e47b68 Aug 26 13:08:26.777947: | libevent_malloc: new ptr-libevent@0x561816e53da8 size 128 Aug 26 13:08:26.777952: | libevent_malloc: new ptr-libevent@0x561816e5f038 size 16 Aug 26 13:08:26.777961: | libevent_realloc: new ptr-libevent@0x561816e5f078 size 256 Aug 26 13:08:26.777965: | libevent_malloc: new ptr-libevent@0x561816e5f1a8 size 8 Aug 26 13:08:26.777969: | libevent_realloc: new ptr-libevent@0x561816df1888 size 144 Aug 26 13:08:26.777972: | libevent_malloc: new ptr-libevent@0x561816df30c8 size 152 Aug 26 13:08:26.777976: | libevent_malloc: new ptr-libevent@0x561816e5f1e8 size 16 Aug 26 13:08:26.777980: | signal event handler PLUTO_SIGCHLD installed Aug 26 13:08:26.777983: | libevent_malloc: new ptr-libevent@0x561816e5f228 size 8 Aug 26 13:08:26.777986: | libevent_malloc: new ptr-libevent@0x561816e5f268 size 152 Aug 26 13:08:26.777989: | signal event handler PLUTO_SIGTERM installed Aug 26 13:08:26.777992: | libevent_malloc: new ptr-libevent@0x561816e5f338 size 8 Aug 26 13:08:26.777995: | libevent_malloc: new ptr-libevent@0x561816e5f378 size 152 Aug 26 13:08:26.777999: | signal event handler PLUTO_SIGHUP installed Aug 26 13:08:26.778001: | libevent_malloc: new ptr-libevent@0x561816e5f448 size 8 Aug 26 13:08:26.778004: | libevent_realloc: release ptr-libevent@0x561816df1888 Aug 26 13:08:26.778008: | libevent_realloc: new ptr-libevent@0x561816e5f488 size 256 Aug 26 13:08:26.778011: | libevent_malloc: new ptr-libevent@0x561816e5f5b8 size 152 Aug 26 13:08:26.778014: | signal event handler PLUTO_SIGSYS installed Aug 26 13:08:26.780042: | created addconn helper (pid:3621) using fork+execve Aug 26 13:08:26.780063: | forked child 3621 Aug 26 13:08:26.780100: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 13:08:26.780116: listening for IKE messages Aug 26 13:08:26.780148: | Inspecting interface lo Aug 26 13:08:26.780156: | found lo with address 127.0.0.1 Aug 26 13:08:26.780160: | Inspecting interface eth0 Aug 26 13:08:26.780165: | found eth0 with address 192.0.1.254 Aug 26 13:08:26.780170: | Inspecting interface eth1 Aug 26 13:08:26.780174: | found eth1 with address 192.1.2.45 Aug 26 13:08:26.780325: Kernel supports NIC esp-hw-offload Aug 26 13:08:26.780340: adding interface eth1/eth1 (esp-hw-offload not supported by kernel) 192.1.2.45:500 Aug 26 13:08:26.780364: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 13:08:26.780371: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 13:08:26.780376: adding interface eth1/eth1 192.1.2.45:4500 Aug 26 13:08:26.780407: adding interface eth0/eth0 (esp-hw-offload not supported by kernel) 192.0.1.254:500 Aug 26 13:08:26.780427: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 13:08:26.780432: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 13:08:26.780436: adding interface eth0/eth0 192.0.1.254:4500 Aug 26 13:08:26.780460: adding interface lo/lo (esp-hw-offload not supported by kernel) 127.0.0.1:500 Aug 26 13:08:26.780481: | NAT-Traversal: Trying sockopt style NAT-T Aug 26 13:08:26.780484: | NAT-Traversal: ESPINUDP(2) setup succeeded for sockopt style NAT-T family IPv4 Aug 26 13:08:26.780487: adding interface lo/lo 127.0.0.1:4500 Aug 26 13:08:26.780527: | no interfaces to sort Aug 26 13:08:26.780531: | FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations Aug 26 13:08:26.780537: | add_fd_read_event_handler: new ethX-pe@0x561816e5fb98 Aug 26 13:08:26.780541: | libevent_malloc: new ptr-libevent@0x561816e53cf8 size 128 Aug 26 13:08:26.780546: | libevent_malloc: new ptr-libevent@0x561816e5fc08 size 16 Aug 26 13:08:26.780555: | setup callback for interface lo 127.0.0.1:4500 fd 22 Aug 26 13:08:26.780558: | add_fd_read_event_handler: new ethX-pe@0x561816e5fc48 Aug 26 13:08:26.780562: | libevent_malloc: new ptr-libevent@0x561816df1f58 size 128 Aug 26 13:08:26.780565: | libevent_malloc: new ptr-libevent@0x561816e5fcb8 size 16 Aug 26 13:08:26.780570: | setup callback for interface lo 127.0.0.1:500 fd 21 Aug 26 13:08:26.780574: | add_fd_read_event_handler: new ethX-pe@0x561816e5fcf8 Aug 26 13:08:26.780577: | libevent_malloc: new ptr-libevent@0x561816df1788 size 128 Aug 26 13:08:26.780580: | libevent_malloc: new ptr-libevent@0x561816e5fd68 size 16 Aug 26 13:08:26.780585: | setup callback for interface eth0 192.0.1.254:4500 fd 20 Aug 26 13:08:26.780588: | add_fd_read_event_handler: new ethX-pe@0x561816e5fda8 Aug 26 13:08:26.780592: | libevent_malloc: new ptr-libevent@0x561816dc4478 size 128 Aug 26 13:08:26.780595: | libevent_malloc: new ptr-libevent@0x561816e5fe18 size 16 Aug 26 13:08:26.780600: | setup callback for interface eth0 192.0.1.254:500 fd 19 Aug 26 13:08:26.780603: | add_fd_read_event_handler: new ethX-pe@0x561816e5fe58 Aug 26 13:08:26.780607: | libevent_malloc: new ptr-libevent@0x561816dc5b78 size 128 Aug 26 13:08:26.780610: | libevent_malloc: new ptr-libevent@0x561816e5fec8 size 16 Aug 26 13:08:26.780615: | setup callback for interface eth1 192.1.2.45:4500 fd 18 Aug 26 13:08:26.780619: | add_fd_read_event_handler: new ethX-pe@0x561816e5ff08 Aug 26 13:08:26.780623: | libevent_malloc: new ptr-libevent@0x561816dc01d8 size 128 Aug 26 13:08:26.780626: | libevent_malloc: new ptr-libevent@0x561816e5ff78 size 16 Aug 26 13:08:26.780631: | setup callback for interface eth1 192.1.2.45:500 fd 17 Aug 26 13:08:26.780636: | certs and keys locked by 'free_preshared_secrets' Aug 26 13:08:26.780638: | certs and keys unlocked by 'free_preshared_secrets' Aug 26 13:08:26.780661: loading secrets from "/etc/ipsec.secrets" Aug 26 13:08:26.780675: | saving Modulus Aug 26 13:08:26.780678: | saving PublicExponent Aug 26 13:08:26.780681: | ignoring PrivateExponent Aug 26 13:08:26.780684: | ignoring Prime1 Aug 26 13:08:26.780688: | ignoring Prime2 Aug 26 13:08:26.780691: | ignoring Exponent1 Aug 26 13:08:26.780695: | ignoring Exponent2 Aug 26 13:08:26.780698: | ignoring Coefficient Aug 26 13:08:26.780702: | ignoring CKAIDNSS Aug 26 13:08:26.780744: | computed rsa CKAID b4 9f 1a ac 9e 45 6e 79 29 c8 81 97 3a 0c 6a d3 Aug 26 13:08:26.780748: | computed rsa CKAID 7f 0f 03 50 Aug 26 13:08:26.780752: loaded private key for keyid: PKK_RSA:AQOm9dY/4 Aug 26 13:08:26.780756: | certs and keys locked by 'process_secret' Aug 26 13:08:26.780759: | certs and keys unlocked by 'process_secret' Aug 26 13:08:26.780766: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 13:08:26.780773: | spent 0.655 milliseconds in whack Aug 26 13:08:26.824339: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 13:08:26.824372: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 13:08:26.824382: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 13:08:26.824385: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 13:08:26.824388: | FOR_EACH_CONNECTION_... in foreach_connection_by_alias Aug 26 13:08:26.824394: | FOR_EACH_CONNECTION_... in conn_by_name Aug 26 13:08:26.824401: | Added new connection good with policy PSK+ENCRYPT+TUNNEL+PFS+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO Aug 26 13:08:26.824425: Failed to add connection "good": ike string error: IKE DH algorithm 'modp1024' is not supported Aug 26 13:08:26.824436: | flush revival: connection 'good' wasn't on the list Aug 26 13:08:26.824440: | processing: STOP connection NULL (in discard_connection() at connections.c:249) Aug 26 13:08:26.824449: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 13:08:26.824456: | spent 0.126 milliseconds in whack Aug 26 13:08:26.824512: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 13:08:26.824522: listening for IKE messages Aug 26 13:08:26.824555: | Inspecting interface lo Aug 26 13:08:26.824562: | found lo with address 127.0.0.1 Aug 26 13:08:26.824565: | Inspecting interface eth0 Aug 26 13:08:26.824569: | found eth0 with address 192.0.1.254 Aug 26 13:08:26.824572: | Inspecting interface eth1 Aug 26 13:08:26.824576: | found eth1 with address 192.1.2.45 Aug 26 13:08:26.824626: | no interfaces to sort Aug 26 13:08:26.824635: | libevent_free: release ptr-libevent@0x561816e53cf8 Aug 26 13:08:26.824639: | free_event_entry: release EVENT_NULL-pe@0x561816e5fb98 Aug 26 13:08:26.824642: | add_fd_read_event_handler: new ethX-pe@0x561816e5fb98 Aug 26 13:08:26.824646: | libevent_malloc: new ptr-libevent@0x561816e53cf8 size 128 Aug 26 13:08:26.824653: | setup callback for interface lo 127.0.0.1:4500 fd 22 Aug 26 13:08:26.824658: | libevent_free: release ptr-libevent@0x561816df1f58 Aug 26 13:08:26.824661: | free_event_entry: release EVENT_NULL-pe@0x561816e5fc48 Aug 26 13:08:26.824664: | add_fd_read_event_handler: new ethX-pe@0x561816e5fc48 Aug 26 13:08:26.824667: | libevent_malloc: new ptr-libevent@0x561816df1f58 size 128 Aug 26 13:08:26.824672: | setup callback for interface lo 127.0.0.1:500 fd 21 Aug 26 13:08:26.824676: | libevent_free: release ptr-libevent@0x561816df1788 Aug 26 13:08:26.824679: | free_event_entry: release EVENT_NULL-pe@0x561816e5fcf8 Aug 26 13:08:26.824682: | add_fd_read_event_handler: new ethX-pe@0x561816e5fcf8 Aug 26 13:08:26.824685: | libevent_malloc: new ptr-libevent@0x561816df1788 size 128 Aug 26 13:08:26.824690: | setup callback for interface eth0 192.0.1.254:4500 fd 20 Aug 26 13:08:26.824693: | libevent_free: release ptr-libevent@0x561816dc4478 Aug 26 13:08:26.824696: | free_event_entry: release EVENT_NULL-pe@0x561816e5fda8 Aug 26 13:08:26.824699: | add_fd_read_event_handler: new ethX-pe@0x561816e5fda8 Aug 26 13:08:26.824702: | libevent_malloc: new ptr-libevent@0x561816dc4478 size 128 Aug 26 13:08:26.824707: | setup callback for interface eth0 192.0.1.254:500 fd 19 Aug 26 13:08:26.824711: | libevent_free: release ptr-libevent@0x561816dc5b78 Aug 26 13:08:26.824714: | free_event_entry: release EVENT_NULL-pe@0x561816e5fe58 Aug 26 13:08:26.824717: | add_fd_read_event_handler: new ethX-pe@0x561816e5fe58 Aug 26 13:08:26.824720: | libevent_malloc: new ptr-libevent@0x561816dc5b78 size 128 Aug 26 13:08:26.824725: | setup callback for interface eth1 192.1.2.45:4500 fd 18 Aug 26 13:08:26.824729: | libevent_free: release ptr-libevent@0x561816dc01d8 Aug 26 13:08:26.824732: | free_event_entry: release EVENT_NULL-pe@0x561816e5ff08 Aug 26 13:08:26.824735: | add_fd_read_event_handler: new ethX-pe@0x561816e5ff08 Aug 26 13:08:26.824738: | libevent_malloc: new ptr-libevent@0x561816dc01d8 size 128 Aug 26 13:08:26.824742: | setup callback for interface eth1 192.1.2.45:500 fd 17 Aug 26 13:08:26.824746: | certs and keys locked by 'free_preshared_secrets' Aug 26 13:08:26.824748: forgetting secrets Aug 26 13:08:26.824756: | certs and keys unlocked by 'free_preshared_secrets' Aug 26 13:08:26.824773: loading secrets from "/etc/ipsec.secrets" Aug 26 13:08:26.824789: | saving Modulus Aug 26 13:08:26.824792: | saving PublicExponent Aug 26 13:08:26.824796: | ignoring PrivateExponent Aug 26 13:08:26.824800: | ignoring Prime1 Aug 26 13:08:26.824803: | ignoring Prime2 Aug 26 13:08:26.824807: | ignoring Exponent1 Aug 26 13:08:26.824810: | ignoring Exponent2 Aug 26 13:08:26.824813: | ignoring Coefficient Aug 26 13:08:26.824817: | ignoring CKAIDNSS Aug 26 13:08:26.824841: | computed rsa CKAID b4 9f 1a ac 9e 45 6e 79 29 c8 81 97 3a 0c 6a d3 Aug 26 13:08:26.824844: | computed rsa CKAID 7f 0f 03 50 Aug 26 13:08:26.824848: loaded private key for keyid: PKK_RSA:AQOm9dY/4 Aug 26 13:08:26.824853: | certs and keys locked by 'process_secret' Aug 26 13:08:26.824856: | certs and keys unlocked by 'process_secret' Aug 26 13:08:26.824864: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 13:08:26.824869: | spent 0.36 milliseconds in whack Aug 26 13:08:26.825442: | processing signal PLUTO_SIGCHLD Aug 26 13:08:26.825462: | waitpid returned pid 3621 (exited with status 0) Aug 26 13:08:26.825467: | reaped addconn helper child (status 0) Aug 26 13:08:26.825471: | waitpid returned ECHILD (no child processes left) Aug 26 13:08:26.825475: | spent 0.0201 milliseconds in signal handler PLUTO_SIGCHLD Aug 26 13:08:32.058476: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 13:08:32.058723: | FOR_EACH_CONNECTION_... in show_connections_status Aug 26 13:08:32.058738: | FOR_EACH_STATE_... in show_states_status (sort_states) Aug 26 13:08:32.058749: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 13:08:32.058756: | spent 0.287 milliseconds in whack Aug 26 13:08:32.541703: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 13:08:32.541996: | FOR_EACH_CONNECTION_... in show_connections_status Aug 26 13:08:32.542009: | FOR_EACH_STATE_... in show_states_status (sort_states) Aug 26 13:08:32.542017: | close_any(fd@16) (in whack_process() at rcv_whack.c:700) Aug 26 13:08:32.542022: | spent 0.332 milliseconds in whack Aug 26 13:08:33.599675: | accept(whackctlfd, (struct sockaddr *)&whackaddr, &whackaddrlen) -> fd@16 (in whack_handle() at rcv_whack.c:722) Aug 26 13:08:33.599694: shutting down Aug 26 13:08:33.599700: | processing: RESET whack log_fd (was fd@16) (in exit_pluto() at plutomain.c:1825) Aug 26 13:08:33.599703: | certs and keys locked by 'free_preshared_secrets' Aug 26 13:08:33.599704: forgetting secrets Aug 26 13:08:33.599709: | certs and keys unlocked by 'free_preshared_secrets' Aug 26 13:08:33.599711: | crl fetch request list locked by 'free_crl_fetch' Aug 26 13:08:33.599713: | crl fetch request list unlocked by 'free_crl_fetch' Aug 26 13:08:33.599720: shutting down interface lo/lo 127.0.0.1:4500 Aug 26 13:08:33.599722: shutting down interface lo/lo 127.0.0.1:500 Aug 26 13:08:33.599724: shutting down interface eth0/eth0 192.0.1.254:4500 Aug 26 13:08:33.599726: shutting down interface eth0/eth0 192.0.1.254:500 Aug 26 13:08:33.599728: shutting down interface eth1/eth1 192.1.2.45:4500 Aug 26 13:08:33.599731: shutting down interface eth1/eth1 192.1.2.45:500 Aug 26 13:08:33.599735: | FOR_EACH_STATE_... in delete_states_dead_interfaces Aug 26 13:08:33.599742: | libevent_free: release ptr-libevent@0x561816e53cf8 Aug 26 13:08:33.599745: | free_event_entry: release EVENT_NULL-pe@0x561816e5fb98 Aug 26 13:08:33.599756: | libevent_free: release ptr-libevent@0x561816df1f58 Aug 26 13:08:33.599759: | free_event_entry: release EVENT_NULL-pe@0x561816e5fc48 Aug 26 13:08:33.599766: | libevent_free: release ptr-libevent@0x561816df1788 Aug 26 13:08:33.599769: | free_event_entry: release EVENT_NULL-pe@0x561816e5fcf8 Aug 26 13:08:33.599777: | libevent_free: release ptr-libevent@0x561816dc4478 Aug 26 13:08:33.599779: | free_event_entry: release EVENT_NULL-pe@0x561816e5fda8 Aug 26 13:08:33.599784: | libevent_free: release ptr-libevent@0x561816dc5b78 Aug 26 13:08:33.599790: | free_event_entry: release EVENT_NULL-pe@0x561816e5fe58 Aug 26 13:08:33.599795: | libevent_free: release ptr-libevent@0x561816dc01d8 Aug 26 13:08:33.599797: | free_event_entry: release EVENT_NULL-pe@0x561816e5ff08 Aug 26 13:08:33.599801: | FOR_EACH_UNORIENTED_CONNECTION_... in check_orientations Aug 26 13:08:33.600174: | libevent_free: release ptr-libevent@0x561816e53da8 Aug 26 13:08:33.600181: | free_event_entry: release EVENT_NULL-pe@0x561816e47b68 Aug 26 13:08:33.600187: | libevent_free: release ptr-libevent@0x561816df2058 Aug 26 13:08:33.600188: | free_event_entry: release EVENT_NULL-pe@0x561816e47028 Aug 26 13:08:33.600192: | libevent_free: release ptr-libevent@0x561816e2b478 Aug 26 13:08:33.600194: | free_event_entry: release EVENT_NULL-pe@0x561816e47bd8 Aug 26 13:08:33.600198: | global timer EVENT_REINIT_SECRET uninitialized Aug 26 13:08:33.600200: | global timer EVENT_SHUNT_SCAN uninitialized Aug 26 13:08:33.600201: | global timer EVENT_PENDING_DDNS uninitialized Aug 26 13:08:33.600203: | global timer EVENT_PENDING_PHASE2 uninitialized Aug 26 13:08:33.600205: | global timer EVENT_CHECK_CRLS uninitialized Aug 26 13:08:33.600207: | global timer EVENT_REVIVE_CONNS uninitialized Aug 26 13:08:33.600208: | global timer EVENT_FREE_ROOT_CERTS uninitialized Aug 26 13:08:33.600210: | global timer EVENT_RESET_LOG_RATE_LIMIT uninitialized Aug 26 13:08:33.600212: | global timer EVENT_NAT_T_KEEPALIVE uninitialized Aug 26 13:08:33.600216: | libevent_free: release ptr-libevent@0x561816df30c8 Aug 26 13:08:33.600218: | signal event handler PLUTO_SIGCHLD uninstalled Aug 26 13:08:33.600220: | libevent_free: release ptr-libevent@0x561816e5f268 Aug 26 13:08:33.600222: | signal event handler PLUTO_SIGTERM uninstalled Aug 26 13:08:33.600224: | libevent_free: release ptr-libevent@0x561816e5f378 Aug 26 13:08:33.600225: | signal event handler PLUTO_SIGHUP uninstalled Aug 26 13:08:33.600227: | libevent_free: release ptr-libevent@0x561816e5f5b8 Aug 26 13:08:33.600229: | signal event handler PLUTO_SIGSYS uninstalled Aug 26 13:08:33.600231: | releasing event base Aug 26 13:08:33.600240: | libevent_free: release ptr-libevent@0x561816e5f488 Aug 26 13:08:33.600242: | libevent_free: release ptr-libevent@0x561816e42418 Aug 26 13:08:33.600245: | libevent_free: release ptr-libevent@0x561816e423c8 Aug 26 13:08:33.600247: | libevent_free: release ptr-libevent@0x561816e42358 Aug 26 13:08:33.600249: | libevent_free: release ptr-libevent@0x561816e42318 Aug 26 13:08:33.600251: | libevent_free: release ptr-libevent@0x561816e5f038 Aug 26 13:08:33.600252: | libevent_free: release ptr-libevent@0x561816e5f1e8 Aug 26 13:08:33.600254: | libevent_free: release ptr-libevent@0x561816e425c8 Aug 26 13:08:33.600256: | libevent_free: release ptr-libevent@0x561816e47138 Aug 26 13:08:33.600257: | libevent_free: release ptr-libevent@0x561816e47b28 Aug 26 13:08:33.600259: | libevent_free: release ptr-libevent@0x561816e5ff78 Aug 26 13:08:33.600261: | libevent_free: release ptr-libevent@0x561816e5fec8 Aug 26 13:08:33.600262: | libevent_free: release ptr-libevent@0x561816e5fe18 Aug 26 13:08:33.600264: | libevent_free: release ptr-libevent@0x561816e5fd68 Aug 26 13:08:33.600266: | libevent_free: release ptr-libevent@0x561816e5fcb8 Aug 26 13:08:33.600267: | libevent_free: release ptr-libevent@0x561816e5fc08 Aug 26 13:08:33.600269: | libevent_free: release ptr-libevent@0x561816deebe8 Aug 26 13:08:33.600271: | libevent_free: release ptr-libevent@0x561816e5f338 Aug 26 13:08:33.600272: | libevent_free: release ptr-libevent@0x561816e5f228 Aug 26 13:08:33.600274: | libevent_free: release ptr-libevent@0x561816e5f1a8 Aug 26 13:08:33.600276: | libevent_free: release ptr-libevent@0x561816e5f448 Aug 26 13:08:33.600277: | libevent_free: release ptr-libevent@0x561816e5f078 Aug 26 13:08:33.600279: | libevent_free: release ptr-libevent@0x561816dbf908 Aug 26 13:08:33.600281: | libevent_free: release ptr-libevent@0x561816dbfd38 Aug 26 13:08:33.600283: | libevent_free: release ptr-libevent@0x561816deef58 Aug 26 13:08:33.600285: | releasing global libevent data Aug 26 13:08:33.600287: | libevent_free: release ptr-libevent@0x561816dc5188 Aug 26 13:08:33.600299: | libevent_free: release ptr-libevent@0x561816dbfcd8 Aug 26 13:08:33.600303: | libevent_free: release ptr-libevent@0x561816dbfdd8 Aug 26 13:08:33.600367: leak detective found no leaks