/testing/guestbin/swan-prep --x509
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# ipsec auto --add ikev2-westnet-eastnet-x509-cr
002 added connection description "ikev2-westnet-eastnet-x509-cr"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# ../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
end raw xfrm state:
==== tuc ====
east Mon Aug 26 13:14:40 UTC 2019
XFRM state:
XFRM policy:
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.2.254 dev eth1
192.0.1.0/24 via 192.1.2.45 dev eth1
192.0.2.0/24 dev eth0 proto kernel scope link src 192.0.2.254
192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.23
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

Libreswan test CA for mainca - Libreswan                     CT,, 
east                                                         u,u,u
hashsha1                                                     P,,  
nic                                                          P,,  
north                                                        P,,  
road                                                         P,,  
west                                                         P,,  
west-ec                                                      P,,  
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# # on east, it should show it failed the NSS IPsec profile and used the NSS TLS profile
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# hostname | grep east > /dev/null && grep "verify_end_cert trying profile" /tmp/pluto.log
| verify_end_cert trying profile IPsec
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# ../bin/check-for-core.sh

CORE FOUND: /tmp/core.road.pluto.4196

[New LWP 4196]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments
Core was generated by `/usr/local/libexec/ipsec/pluto --config /etc/ipsec.conf --leak-detective'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007f88c352f57f in raise () from /lib64/libc.so.6
#0  0x00007f88c352f57f in raise () from /lib64/libc.so.6
#1  0x00007f88c3519895 in abort () from /lib64/libc.so.6
#2  0x000055fd7fdd63b0 in lswlog_passert_suffix (buf=buf@entry=0x7ffd4c4c12c0, where=...) at /home/build/libreswan/lib/libswan/lswlog_passert.c:32
#3  0x000055fd7fdc7c37 in lsw_passert_fail (where=..., fmt=fmt@entry=0x55fd7fdfc321 "%s") at /home/build/libreswan/lib/libswan/lsw_passert_fail.c:31
#4  0x000055fd7fd633e6 in free_signal_handlers () at /home/build/libreswan/programs/pluto/server.c:624
#5  free_pluto_event_list () at /home/build/libreswan/programs/pluto/server.c:671
#6  0x000055fd7fd5ff2d in exit_pluto (status=10) at /home/build/libreswan/programs/pluto/plutomain.c:1850
#7  0x000055fd7fd268b2 in create_lock () at /home/build/libreswan/programs/pluto/plutomain.c:272
#8  main (argc=4, argv=0x7ffd4c4c1b18) at /home/build/libreswan/programs/pluto/plutomain.c:1458


warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments

warning: Loadable section ".note.gnu.property" outside of ELF segments
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-x509-26-criticalflag\[root@east ikev2-x509-26-criticalflag]#