/testing/guestbin/swan-prep --x509 Preparing X.509 files east # certutil -D -n west -d sql:/etc/ipsec.d east # # add second identity/cert east # pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/otherca/othereast.p12 pk12util: PKCS12 IMPORT SUCCESSFUL east # ipsec checknss --settrusts correcting trust bits for west-ec correcting trust bits for Libreswan test CA for otherca - Libreswan east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # # this causes main to match first, it should not switch since west uses main east # ipsec auto --add other 002 added connection description "other" east # ipsec auto --add main 002 added connection description "main" east # echo "initdone" initdone east # # we should see conn other being up east # ipsec whack --trafficstatus east # east # ../bin/check-for-core.sh east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi