--- west.console.txt 1970-01-01 00:00:00.000000000 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:14:18.704762825 +0000 @@ -0,0 +1,47 @@ +/testing/guestbin/swan-prep --x509 +Preparing X.509 files +west # + certutil -D -n east -d sql:/etc/ipsec.d +west # + pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/otherca/otherwest.p12 +pk12util: PKCS12 IMPORT SUCCESSFUL +west # + ipsec checknss --settrusts +correcting trust bits for east-ec +correcting trust bits for Libreswan test CA for otherca - Libreswan +west # + ipsec start +Redirecting to: [initsystem] +west # + /testing/pluto/bin/wait-until-pluto-started +west # + ipsec whack --impair suppress-retransmits +west # + ipsec auto --add main +002 added connection description "main" +west # + #ipsec auto --add other +west # + echo "initdone" +initdone +west # + ipsec auto --up main +002 "main" #1: initiating v2 parent SA +1v2 "main" #1: initiate +1v2 "main" #1: STATE_PARENT_I1: sent v2I1, expected v2R1 +1v2 "main" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} +002 "main" #2: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED +000 "main" #2: scheduling retry attempt 1 of an unlimited number, but releasing whack +west # + echo "done" +done +west # + # we should see conn other being up +west # + ipsec whack --trafficstatus +west # +west # + ../bin/check-for-core.sh +west # + if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi +