/testing/guestbin/swan-prep --x509 Preparing X.509 files kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# certutil -D -n west -d sql:/etc/ipsec.d kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# # add second identity/cert kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# #pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/otherca/othereast.p12 kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/mainca/north.p12 pk12util: PKCS12 IMPORT SUCCESSFUL kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: /etc/init.d/ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Starting pluto IKE daemon for IPsec: kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# ipsec auto --add main-east 002 added connection description "main-east" kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# ipsec auto --add main-north 002 added connection description "main-north" kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# # we should see conn other being up kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# ipsec whack --trafficstatus kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# # On east, we should see it has switched kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# hostname | grep east > /dev/null && grep switched /tmp/pluto.log "main-north"[1] 192.1.2.45 #1: switched from "main-north"[1] 192.1.2.45 to "main-east" kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# ipsec whack --shutdown 002 shutting down kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard]# ipsec auto --status whack: Pluto is not running (no "/run/pluto/pluto.ctl") kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard\[root@east ikev2-x509-20-multicert-rightid-san-wildcard 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<