/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec auto --add road-east-1
002 added connection description "road-east-1"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# # there should be only one pub key not road.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec auto --listpubkeys
000  
000 List of Public Keys:
000  
000 Aug 26 13:28:10 2019, 2192 RSA Key AQO9bJbr3 (no private key), until --- -- --:--:-- ---- ok (expires never)
000        ID_FQDN '@east'
000 Aug 26 13:28:10 2019, 3104 RSA Key AQPHFfpyJ (has private key), until --- -- --:--:-- ---- ok (expires never)
000        ID_FQDN '@road.testing.libreswan.org'
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec auto --up road-east-1
002 "road-east-1" #1: initiating v2 parent SA
181 "road-east-1" #1: initiate
002 "road-east-1": constructed local IKE proposals for road-east-1 (IKE SA initiator selecting KE): 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519
181 "road-east-1" #1: STATE_PARENT_I1: sent v2I1, expected v2R1
002 "road-east-1" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
002 "road-east-1": constructed local ESP/AH proposals for road-east-1 (IKE SA initiator emitting ESP/AH proposals): 1:ESP:ENCR=AES_GCM_C_256;INTEG=NONE;DH=NONE;ESN=DISABLED 2:ESP:ENCR=AES_GCM_C_128;INTEG=NONE;DH=NONE;ESN=DISABLED 3:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=NONE;ESN=DISABLED 4:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=NONE;ESN=DISABLED
182 "road-east-1" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048}
002 "road-east-1" #2: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
002 "road-east-1" #2: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED
000 "road-east-1" #2: scheduling retry attempt 1 of an unlimited number, but releasing whack
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# # there should be two public keys. including road
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ping -n -c 4 -I 192.1.3.209 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data.
64 bytes from 192.1.2.23: icmp_seq=1 ttl=63 time=0.045 ms
64 bytes from 192.1.2.23: icmp_seq=2 ttl=63 time=0.056 ms
64 bytes from 192.1.2.23: icmp_seq=3 ttl=63 time=0.057 ms
64 bytes from 192.1.2.23: icmp_seq=4 ttl=63 time=0.056 ms

--- 192.1.2.23 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 71ms
rtt min/avg/max/mdev = 0.045/0.053/0.057/0.008 ms
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec whack --trafficstatus
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec auto --listpubkeys
000  
000 List of Public Keys:
000  
000 Aug 26 13:28:10 2019, 2192 RSA Key AQO9bJbr3 (no private key), until --- -- --:--:-- ---- ok (expires never)
000        ID_FQDN '@east'
000 Aug 26 13:28:10 2019, 3104 RSA Key AQPHFfpyJ (has private key), until --- -- --:--:-- ---- ok (expires never)
000        ID_FQDN '@road.testing.libreswan.org'
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# # prepare for road restart with new keys
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# cp road-2.secrets /etc/ipsec.secrets
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec stop
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec stop
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Shutting down pluto IKE daemon
002 shutting down

kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# sleep 2
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec whack --impair suppress-retransmits --impair revival
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec auto --add road-east-2
002 added connection description "road-east-2"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ipsec auto --up road-east-2
002 "road-east-2" #1: initiating v2 parent SA
181 "road-east-2" #1: initiate
002 "road-east-2": constructed local IKE proposals for road-east-2 (IKE SA initiator selecting KE): 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519
181 "road-east-2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1
002 "road-east-2" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
002 "road-east-2": constructed local ESP/AH proposals for road-east-2 (IKE SA initiator emitting ESP/AH proposals): 1:ESP:ENCR=AES_GCM_C_256;INTEG=NONE;DH=NONE;ESN=DISABLED 2:ESP:ENCR=AES_GCM_C_128;INTEG=NONE;DH=NONE;ESN=DISABLED 3:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=NONE;ESN=DISABLED 4:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=NONE;ESN=DISABLED
182 "road-east-2" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048}
002 "road-east-2" #2: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
002 "road-east-2" #2: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED
000 "road-east-2" #2: scheduling retry attempt 1 of an unlimited number, but releasing whack
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# ping -n -c 4 -I 192.1.3.209 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data.
64 bytes from 192.1.2.23: icmp_seq=1 ttl=63 time=0.055 ms
64 bytes from 192.1.2.23: icmp_seq=2 ttl=63 time=0.056 ms
64 bytes from 192.1.2.23: icmp_seq=3 ttl=63 time=0.046 ms
64 bytes from 192.1.2.23: icmp_seq=4 ttl=63 time=0.054 ms

--- 192.1.2.23 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 57ms
rtt min/avg/max/mdev = 0.046/0.052/0.056/0.009 ms
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-55-ipseckey-02\[root@road ikev2-55-ipseckey-02]#