/testing/guestbin/swan-prep  --x509
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# certutil -D -n road -d sql:/etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# cp east-ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# echo "192.1.3.0/24"  >> /etc/ipsec.d/policies/clear-or-private
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# # A tunnel should have established with non-zero byte counters
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<grep "negotiated connection" /tmp/pluto.log
"clear-or-private#192.1.3.0/24"[1] ...192.1.3.209 #2: negotiated connection [192.1.2.23-192.1.2.23:0-65535 0] -> [192.1.3.209-192.1.3.209:0-65535 0]
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# # you should see both RSA and NULL
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# grep IKEv2_AUTH_ /tmp/pluto.log
|    auth method: IKEv2_AUTH_NULL (0xd)
|    auth method: IKEv2_AUTH_RSA (0x1)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825571.163:205098): avc:  denied  { write } for  pid=460 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=945812982 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/certoe-03-cop-whack\[root@east certoe-03-cop-whack]#