/testing/guestbin/swan-prep --x509
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec auto --add westnet-eastnet-ipv4-psk-ikev2
002 added connection description "westnet-eastnet-ipv4-psk-ikev2"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec auto --up  westnet-eastnet-ipv4-psk-ikev2
002 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23 #1: initiating v2 parent SA
181 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23 #1: initiate
002 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23: constructed local IKE proposals for westnet-eastnet-ipv4-psk-ikev2 (IKE SA initiator selecting KE): 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519
181 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23 #1: STATE_PARENT_I1: sent v2I1, expected v2R1
002 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23 #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
031 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23 #1: STATE_PARENT_I1: 60 second timeout exceeded after 0 retransmits.  No response (or no acceptable response) to our first IKEv2 message
000 "westnet-eastnet-ipv4-psk-ikev2"[1] 192.1.2.23 #1: starting keying attempt 2 of an unlimited number, but releasing whack
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 31]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 31 roadrun.sh 'ipsec auto --up  westnet-eastnet-ipv4-psk-ikev2' <<<<<<<<<<tuc<<<<<<<<<<ping -n -c 2 -I 192.0.2.1 192.1.2.23
bind: Cannot assign requested address
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 2]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 2 roadrun.sh 'ping -n -c 2 -I 192.0.2.1 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# # change ip, emulating switching network
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# killall -9 pluto
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ifconfig eth0 192.1.3.210 netmask 255.255.255.0
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# route add default gw 192.1.3.254
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
pluto: FATAL: lock file "/run/pluto/pluto.pid" already exists
| certs and keys locked by 'free_preshared_secrets'
| certs and keys unlocked by 'free_preshared_secrets'
| crl fetch request list locked by 'free_crl_fetch'
| crl fetch request list unlocked by 'free_crl_fetch'
ABORT: ASSERTION FAILED: event_initialized(&se->ev) (in free_signal_handlers() at server.c:624)
/etc/init.d/ipsec: line 120:  5496 Aborted                 (core dumped) ${IPSEC_EXECDIR}/pluto --config ${IPSEC_CONF} ${PLUTO_OPTIONS}
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# /testing/pluto/bin/wait-until-pluto-started
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh '/testing/pluto/bin/wait-until-pluto-started' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --impair suppress-retransmits
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --impair suppress-retransmits' <<<<<<<<<<tuc<<<<<<<<<<ipsec auto --add westnet-eastnet-ipv4-psk-ikev2
connect(pluto_ctl) failed: Connection refused
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 255]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 255 roadrun.sh 'ipsec auto --add westnet-eastnet-ipv4-psk-ikev2' <<<<<<<<<<tuc<<<<<<<<<<ipsec auto --up westnet-eastnet-ipv4-psk-ikev2
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec auto --up westnet-eastnet-ipv4-psk-ikev2' <<<<<<<<<<tuc<<<<<<<<<<# should not fail to ping
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh '# should not fail to ping' <<<<<<<<<<tuc<<<<<<<<<<ping -n -c 4 -I 192.0.2.1 192.1.2.23
bind: Cannot assign requested address
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 2]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 2 roadrun.sh 'ping -n -c 4 -I 192.0.2.1 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<echo done
done
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ipsec status | grep eastnet
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ipsec status | grep eastnet' <<<<<<<<<<tuc<<<<<<<<<<# should show no hits
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# should show no hits' <<<<<<<<<<tuc<<<<<<<<<<grep INVALID_IKE_SPI /tmp/pluto.log
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep INVALID_IKE_SPI /tmp/pluto.log' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# : ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825425.626:199586): avc:  denied  { write } for  pid=17381 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=18857236 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825427.143:199645): avc:  denied  { write } for  pid=18104 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=946001002 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-hostpair-01\[root@road ikev2-hostpair-01]#