/testing/guestbin/swan-prep --x509 Preparing X.509 files east # certutil -D -n west -d sql:/etc/ipsec.d east # # add second identity/cert east # #pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/otherca/othereast.p12 east # pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/mainca/north.p12 pk12util: PKCS12 IMPORT SUCCESSFUL east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # ipsec auto --add main-east 002 added connection description "main-east" east # ipsec auto --add main-north 002 added connection description "main-north" east # echo "initdone" initdone east # # we should see a connection switch on east east # ipsec whack --trafficstatus east # hostname | grep east && grep switched /tmp/pluto.log east "main-north"[1] 192.1.2.45 #1: switched from "main-north"[1] 192.1.2.45 to "main-east" east # east # ../bin/check-for-core.sh east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi