/testing/guestbin/swan-prep --x509
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# certutil -D -n west -d sql:/etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# ipsec auto --add san
002 added connection description "san"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# # confirm the right ID types were sent/received
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# grep "ID type" /tmp/pluto.log | sort | uniq
|    ID type: ID_DER_ASN1_DN (0x9)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-aggr-12-san-dn-match\[root@east ikev1-x509-aggr-12-san-dn-match]#