/testing/guestbin/swan-prep --x509 Preparing X.509 files east # certutil -D -n west -d sql:/etc/ipsec.d east # # add second identity/cert east # pk12util -W foobar -K '' -d sql:/etc/ipsec.d -i /testing/x509/pkcs12/otherca/othereast.p12 pk12util: PKCS12 IMPORT SUCCESSFUL east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # ipsec auto --add other 002 added connection description "other" east # ipsec auto --add main 002 added connection description "main" east # echo "initdone" initdone east # # on west, we should only see main, on east we should other and main east # ipsec whack --trafficstatus 006 #4: "main"[2] 192.1.2.45, type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@west.testing.libreswan.org' 006 #2: "other"[1] 192.1.2.45, type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='@otherwest.other.libreswan.org' east # east # ../bin/check-for-core.sh east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi