/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add westnet-eastnet-ipv4-psk-ikev2 002 added connection description "westnet-eastnet-ipv4-psk-ikev2" west # echo "initdone" initdone west # # send KE:0 west # ipsec whack --impair ke-payload:0 west # ipsec whack --impair suppress-retransmits west # ipsec auto --up westnet-eastnet-ipv4-psk-ikev2 002 "westnet-eastnet-ipv4-psk-ikev2" #1: initiating v2 parent SA 1v2 "westnet-eastnet-ipv4-psk-ikev2" #1: initiate 002 "westnet-eastnet-ipv4-psk-ikev2" #1: IMPAIR: sending bogus KE (g^x) == 0 value to break DH calculations 1v2 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1 207 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: v2N_INVALID_SYNTAX 002 "westnet-eastnet-ipv4-psk-ikev2" #1: deleting state (STATE_PARENT_I1) and NOT sending notification west # ipsec whack --impair none west # # receive KE:0 west # ipsec whack --impair suppress-retransmits west # ipsec auto --up westnet-eastnet-ipv4-psk-ikev2 002 "westnet-eastnet-ipv4-psk-ikev2" #2: initiating v2 parent SA 1v2 "westnet-eastnet-ipv4-psk-ikev2" #2: initiate 1v2 "westnet-eastnet-ipv4-psk-ikev2" #2: STATE_PARENT_I1: sent v2I1, expected v2R1 207 "westnet-eastnet-ipv4-psk-ikev2" #2: STATE_PARENT_I1: v2N_INVALID_SYNTAX 002 "westnet-eastnet-ipv4-psk-ikev2" #2: deleting state (STATE_PARENT_I1) and NOT sending notification west # echo done done west # grep -e v2N_INVALID_KE_PAYLOAD -e v2N_INVALID_SYNTAX /tmp/pluto.log | #1 complete v2 state transition from PARENT_I1 to PARENT_I2 with status STF_FAIL+v2N_INVALID_SYNTAX | state transition function for STATE_PARENT_I1 failed: v2N_INVALID_SYNTAX | #2 complete v2 state transition from PARENT_I1 to PARENT_I2 with status STF_FAIL+v2N_INVALID_SYNTAX | state transition function for STATE_PARENT_I1 failed: v2N_INVALID_SYNTAX west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi