--- east.console.txt	2019-08-24 18:12:56.137678719 +0000
+++ OUTPUT/east.console.txt	2019-08-26 13:26:07.266954967 +0000
@@ -12,27 +12,10 @@
 002 added connection description "westnet-eastnet"
 east #
  ipsec auto --add distraction
-002 bad CA string 'Something bogus': unknown OID in ID_DER_ASN1_DN (ignored)
-002 added connection description "distraction"
+connect(pluto_ctl) failed: Connection refused
 east #
  ipsec auto --status | grep westnet-eastnet
-000 "westnet-eastnet": 192.1.2.23<192.1.2.23>[C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org]---192.1.2.45...%any; unrouted; eroute owner: #0
-000 "westnet-eastnet":     oriented; my_ip=unset; their_ip=unset; mycert=east; my_updown=ipsec _updown;
-000 "westnet-eastnet":   xauth us:none, xauth them:none,  my_username=[any]; their_username=[any]
-000 "westnet-eastnet":   our auth:rsasig, their auth:rsasig
-000 "westnet-eastnet":   modecfg info: us:none, them:none, modecfg policy:push, dns:unset, domains:unset, banner:unset, cat:unset;
-000 "westnet-eastnet":   labeled_ipsec:no;
-000 "westnet-eastnet":   policy_label:unset;
-000 "westnet-eastnet":   CAs: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org'...'%any'
-000 "westnet-eastnet":   ike_life: 3600s; ipsec_life: 28800s; replay_window: 32; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0;
-000 "westnet-eastnet":   retransmit-interval: 9999ms; retransmit-timeout: 99s;
-000 "westnet-eastnet":   initial-contact:no; cisco-unity:no; fake-strongswan:no; send-vendorid:no; send-no-esp-tfc:no;
-000 "westnet-eastnet":   policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO;
-000 "westnet-eastnet":   conn_prio: 32,32; interface: eth1; metric: 0; mtu: unset; sa_prio:auto; sa_tfc:none;
-000 "westnet-eastnet":   nflog-group: unset; mark: unset; vti-iface:unset; vti-routing:no; vti-shared:no; nic-offload:auto;
-000 "westnet-eastnet":   our idtype: ID_DER_ASN1_DN; our id=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org; their idtype: %none; their id=(none)
-000 "westnet-eastnet":   dpd: action:hold; delay:0; timeout:0; nat-t: encaps:auto; nat_keepalive:yes; ikev1_natt:both
-000 "westnet-eastnet":   newest ISAKMP SA: #0; newest IPsec SA: #0;
+whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
 east #
  echo "initdone"
 initdone
@@ -40,29 +23,7 @@
  ../../pluto/bin/ipsec-look.sh
 east NOW
 XFRM state:
-src 192.1.2.45 dst 192.1.2.23
-	proto esp spi 0xSPISPI reqid REQID mode tunnel
-	replay-window 32 flag af-unspec
-	auth-trunc hmac(sha1) 0xHASHKEY 96
-	enc cbc(aes) 0xENCKEY
-src 192.1.2.23 dst 192.1.2.45
-	proto esp spi 0xSPISPI reqid REQID mode tunnel
-	replay-window 32 flag af-unspec
-	auth-trunc hmac(sha1) 0xHASHKEY 96
-	enc cbc(aes) 0xENCKEY
 XFRM policy:
-src 192.1.2.23/32 dst 192.1.2.45/32
-	dir out priority 1040351 ptype main
-	tmpl src 192.1.2.23 dst 192.1.2.45
-		proto esp reqid REQID mode tunnel
-src 192.1.2.45/32 dst 192.1.2.23/32
-	dir fwd priority 1040351 ptype main
-	tmpl src 192.1.2.45 dst 192.1.2.23
-		proto esp reqid REQID mode tunnel
-src 192.1.2.45/32 dst 192.1.2.23/32
-	dir in priority 1040351 ptype main
-	tmpl src 192.1.2.45 dst 192.1.2.23
-		proto esp reqid REQID mode tunnel
 XFRM done
 IPSEC mangle TABLES
 NEW_IPSEC_CONN mangle TABLES