/testing/guestbin/swan-prep --x509
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# certutil -D -n east -d sql:/etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/otherca/otherwest.p12
pk12util: PKCS12 IMPORT SUCCESSFUL
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec auto --add other
002 added connection description "other"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec auto --up other
002 "other" #1: initiating v2 parent SA
181 "other" #1: initiate
002 "other": constructed local IKE proposals for other (IKE SA initiator selecting KE): 1:IKE:ENCR=AES_GCM_C_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 2:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=NONE;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 3:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519 4:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512,HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=MODP2048,MODP3072,MODP4096,MODP8192,ECP_256,ECP_384,ECP_521,CURVE25519
181 "other" #1: STATE_PARENT_I1: sent v2I1, expected v2R1
002 "other" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
002 "other": constructed local ESP/AH proposals for other (IKE SA initiator emitting ESP/AH proposals): 1:ESP:ENCR=AES_GCM_C_256;INTEG=NONE;DH=NONE;ESN=DISABLED 2:ESP:ENCR=AES_GCM_C_128;INTEG=NONE;DH=NONE;ESN=DISABLED 3:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=NONE;ESN=DISABLED 4:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256,HMAC_SHA2_256_128;DH=NONE;ESN=DISABLED
182 "other" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048}
002 "other" #2: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
002 "other" #2: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED
000 "other" #2: scheduling retry attempt 1 of an unlimited number, but releasing whack
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec whack --trafficstatus
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# killall -9 pluto
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
pluto: FATAL: lock file "/run/pluto/pluto.pid" already exists
| certs and keys locked by 'free_preshared_secrets'
| certs and keys unlocked by 'free_preshared_secrets'
| crl fetch request list locked by 'free_crl_fetch'
| crl fetch request list unlocked by 'free_crl_fetch'
ABORT: ASSERTION FAILED: event_initialized(&se->ev) (in free_signal_handlers() at server.c:624)
/etc/init.d/ipsec: line 120: 15127 Aborted                 (core dumped) ${IPSEC_EXECDIR}/pluto --config ${IPSEC_CONF} ${PLUTO_OPTIONS}
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# /testing/pluto/bin/wait-until-pluto-started
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh '/testing/pluto/bin/wait-until-pluto-started' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --impair suppress-retransmits
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh 'ipsec whack --impair suppress-retransmits' <<<<<<<<<<tuc<<<<<<<<<<ipsec auto --add main
connect(pluto_ctl) failed: Connection refused
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 255]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 255 westrun.sh 'ipsec auto --add main' <<<<<<<<<<tuc<<<<<<<<<<ipsec auto --up main
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh 'ipsec auto --up main' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh '' <<<<<<<<<<tuc<<<<<<<<<<echo "done"
done
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# # on west, we should only see main, on east we should other and main
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825293.200:193324): avc:  denied  { write } for  pid=19436 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=578212285 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825293.265:193334): avc:  denied  { append } for  pid=19483 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=945830558 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825295.295:193430): avc:  denied  { write } for  pid=20627 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=294957570 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825295.322:193440): avc:  denied  { write } for  pid=20647 comm="iptables" path="/tmp/pluto.log" dev="dm-0" ino=294957580 scontext=unconfined_u:system_r:iptables_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825297.710:193518): avc:  denied  { append } for  pid=21702 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=945830558 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825299.356:193620): avc:  denied  { write } for  pid=22757 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=578215952 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-21-shared-ip\[root@west ikev2-x509-21-shared-ip]#