/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add westnet-eastnet-ipv4-psk 002 added connection description "westnet-eastnet-ipv4-psk" west # echo "initdone" initdone west # # should fail fast west # ipsec whack --impair ke-payload:empty --impair delete-on-retransmit west # ipsec auto --up westnet-eastnet-ipv4-psk 002 "westnet-eastnet-ipv4-psk" #1: initiating Main Mode 1v1 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I1: initiate 002 "westnet-eastnet-ipv4-psk" #1: IMPAIR: sending empty KE (g^x) 1v1 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: sent MI2, expecting MR2 003 "westnet-eastnet-ipv4-psk" #1: ignoring informational payload INVALID_KEY_INFORMATION, msgid=00000000, length=12 003 "westnet-eastnet-ipv4-psk" #1: received and ignored notification payload: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #1: IMPAIR: retransmit so deleting SA 002 "westnet-eastnet-ipv4-psk" #1: deleting state (STATE_MAIN_I2) and NOT sending notification west # ipsec whack --impair none west # # expected to fail with a timeout west # ipsec whack --impair suppress-retransmits west # ipsec auto --add westnet-eastnet-ipv4-psk 002 "westnet-eastnet-ipv4-psk": terminating SAs using this connection 002 "westnet-eastnet-ipv4-psk" #2: deleting state (STATE_MAIN_I2) and NOT sending notification 002 added connection description "westnet-eastnet-ipv4-psk" west # ipsec auto --up westnet-eastnet-ipv4-psk 002 "westnet-eastnet-ipv4-psk" #3: initiating Main Mode 1v1 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I1: initiate 1v1 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: sent MI2, expecting MR2 003 "westnet-eastnet-ipv4-psk" #3: KE has 0 byte DH public value; 256 required 217 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 003 "westnet-eastnet-ipv4-psk" #3: KE has 0 byte DH public value; 256 required 217 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 003 "westnet-eastnet-ipv4-psk" #3: KE has 0 byte DH public value; 256 required 217 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 031 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: 60 second timeout exceeded after 0 retransmits. No response (or no acceptable response) to our IKEv1 message 000 "westnet-eastnet-ipv4-psk" #3: starting keying attempt 2 of an unlimited number, but releasing whack west # echo done done west # grep INVALID_KEY_INFORMATION /tmp/pluto.log | Notify Message Type: INVALID_KEY_INFORMATION (0x11) "westnet-eastnet-ipv4-psk" #1: ignoring informational payload INVALID_KEY_INFORMATION, msgid=00000000, length=12 | processing informational INVALID_KEY_INFORMATION (17) "westnet-eastnet-ipv4-psk" #1: received and ignored notification payload: INVALID_KEY_INFORMATION | Notify Message Type: INVALID_KEY_INFORMATION (0x11) "westnet-eastnet-ipv4-psk" #2: ignoring informational payload INVALID_KEY_INFORMATION, msgid=00000000, length=12 | processing informational INVALID_KEY_INFORMATION (17) "westnet-eastnet-ipv4-psk" #2: received and ignored notification payload: INVALID_KEY_INFORMATION | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #4: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi