/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add westnet-eastnet-ipv4-psk-ikev2 002 added connection description "westnet-eastnet-ipv4-psk-ikev2" west # ipsec whack --impair revival west # echo "initdone" initdone west # # should fail fast west # ipsec whack --impair ke-payload:empty --impair delete-on-retransmit west # ipsec auto --up westnet-eastnet-ipv4-psk-ikev2 002 "westnet-eastnet-ipv4-psk-ikev2" #1: initiating v2 parent SA 1v2 "westnet-eastnet-ipv4-psk-ikev2" #1: initiate 002 "westnet-eastnet-ipv4-psk-ikev2" #1: IMPAIR: sending an empty KE value 1v2 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: sent v2I1, expected v2R1 002 "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: received unauthenticated v2N_INVALID_SYNTAX - ignored 002 "westnet-eastnet-ipv4-psk-ikev2" #1: IMPAIR: retransmit so deleting SA 002 "westnet-eastnet-ipv4-psk-ikev2" #1: deleting state (STATE_PARENT_I1) and NOT sending notification 002 "westnet-eastnet-ipv4-psk-ikev2" #1: IMPAIR: skipping revival of connection 'westnet-eastnet-ipv4-psk-ikev2' that is supposed to remain up west # ipsec whack --impair none west # # expected to fail with a timeout west # ipsec whack --impair suppress-retransmits west # ipsec auto --up westnet-eastnet-ipv4-psk-ikev2 002 "westnet-eastnet-ipv4-psk-ikev2" #2: initiating v2 parent SA 1v2 "westnet-eastnet-ipv4-psk-ikev2" #2: initiate 1v2 "westnet-eastnet-ipv4-psk-ikev2" #2: STATE_PARENT_I1: sent v2I1, expected v2R1 003 "westnet-eastnet-ipv4-psk-ikev2" #2: KE has 0 byte DH public value; 256 required 207 "westnet-eastnet-ipv4-psk-ikev2" #2: STATE_PARENT_I1: v2N_INVALID_SYNTAX 031 "westnet-eastnet-ipv4-psk-ikev2" #2: STATE_PARENT_I1: 60 second timeout exceeded after 0 retransmits. No response (or no acceptable response) to our first IKEv2 message 000 "westnet-eastnet-ipv4-psk-ikev2" #2: starting keying attempt 2 of an unlimited number, but releasing whack west # echo done done west # grep -e v2N_INVALID_KE_PAYLOAD -e v2N_INVALID_SYNTAX /tmp/pluto.log | Notify Message Type: v2N_INVALID_SYNTAX (0x7) "westnet-eastnet-ipv4-psk-ikev2" #1: STATE_PARENT_I1: received unauthenticated v2N_INVALID_SYNTAX - ignored | #2 complete_v2_state_transition() PARENT_I1->PARENT_I2 with status STF_FAIL+v2N_INVALID_SYNTAX | state transition function for STATE_PARENT_I1 failed: v2N_INVALID_SYNTAX | #3 complete_v2_state_transition() PARENT_I1->PARENT_I2 with status STF_FAIL+v2N_INVALID_SYNTAX | state transition function for STATE_PARENT_I1 failed: v2N_INVALID_SYNTAX west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi