/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# echo "192.1.2.0/24"  >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# cp ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# sleep 10
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# ping -c 4 -I 192.1.2.45 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.2.45 : 56(84) bytes of data.
64 bytes from 192.1.2.23: icmp_seq=2 ttl=64 time=0.071 ms
64 bytes from 192.1.2.23: icmp_seq=3 ttl=64 time=0.068 ms
64 bytes from 192.1.2.23: icmp_seq=4 ttl=64 time=0.100 ms

--- 192.1.2.23 ping statistics ---
4 packets transmitted, 3 received, 25% packet loss, time 81ms
rtt min/avg/max/mdev = 0.068/0.079/0.100/0.017 ms
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# ping -n -c 4 10.0.10.1
PING 10.0.10.1 (10.0.10.1) 56(84) bytes of data.

--- 10.0.10.1 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 97ms

kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ping -n -c 4 10.0.10.1' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# ../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
src 192.1.2.45/32 dst 192.1.2.23/32 \	dir out priority 2088927 ptype main \	tmpl src 192.1.2.45 dst 192.1.2.23\		proto esp reqid 16425 mode tunnel\
src 192.1.2.23/32 dst 192.1.2.45/32 \	dir fwd priority 2088927 ptype main \	tmpl src 192.1.2.23 dst 192.1.2.45\		proto esp reqid 16425 mode tunnel\
src 192.1.2.23/32 dst 192.1.2.45/32 \	dir in priority 2088927 ptype main \	tmpl src 192.1.2.23 dst 192.1.2.45\		proto esp reqid 16425 mode tunnel\
src 192.1.2.45/32 dst 192.1.2.0/24 \	dir out priority 2088935 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.253/32 dst 192.1.2.45/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.253/32 dst 192.1.2.45/32 \	dir in priority 1564639 ptype main \
src 192.1.2.45/32 dst 192.1.2.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.2.45/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.2.45/32 \	dir in priority 1564639 ptype main \
src 192.1.2.45/32 dst 192.1.3.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.2.45/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.2.45/32 \	dir in priority 1564639 ptype main \
src 192.1.2.45/32 dst 192.1.3.254/32 \	dir out priority 1564639 ptype main \
end raw xfrm state:
==== tuc ====
west Mon Aug 26 13:19:59 UTC 2019
XFRM state:
src 192.1.2.23 dst 192.1.2.45
	proto esp spi 0x155446be reqid 16425 mode tunnel
	replay-window 32 flag af-unspec
	aead rfc4106(gcm(aes)) 0x39e0c87af0d4b88c411df073402ccf6146e6f4cf1178a59d5b88e7a2d7d35cd640b8e05e 128
	anti-replay context: seq 0x3, oseq 0x0, bitmap 0x00000007
src 192.1.2.45 dst 192.1.2.23
	proto esp spi 0x3da9ba6e reqid 16425 mode tunnel
	replay-window 32 flag af-unspec
	aead rfc4106(gcm(aes)) 0xbf6d2a8bf775caa9d40bc817f366a4432a429f1bfd3cdb22f6667a8df78b4fc86692b63c 128
	anti-replay context: seq 0x0, oseq 0x3, bitmap 0x00000000
XFRM policy:
src 192.1.2.253/32 dst 192.1.2.45/32
	dir fwd priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.2.45/32
	dir in priority 1564639 ptype main
src 192.1.2.45/32 dst 192.1.2.253/32
	dir out priority 1564639 ptype main
src 192.1.2.45/32 dst 192.1.3.253/32
	dir out priority 1564639 ptype main
src 192.1.2.45/32 dst 192.1.3.254/32
	dir out priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.2.45/32
	dir fwd priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.2.45/32
	dir in priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.2.45/32
	dir fwd priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.2.45/32
	dir in priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.2.45/32
	dir fwd priority 2088927 ptype main
	tmpl src 192.1.2.23 dst 192.1.2.45
		proto esp reqid 16425 mode tunnel
src 192.1.2.23/32 dst 192.1.2.45/32
	dir in priority 2088927 ptype main
	tmpl src 192.1.2.23 dst 192.1.2.45
		proto esp reqid 16425 mode tunnel
src 192.1.2.45/32 dst 192.1.2.23/32
	dir out priority 2088927 ptype main
	tmpl src 192.1.2.45 dst 192.1.2.23
		proto esp reqid 16425 mode tunnel
src 192.1.2.45/32 dst 192.1.2.0/24
	dir out priority 2088935 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.2.254 dev eth1
192.0.1.0/24 dev eth0 proto kernel scope link src 192.0.1.254
192.0.2.0/24 via 192.1.2.23 dev eth1
192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.45
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825598.104:205938): avc:  denied  { write } for  pid=12556 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63814253 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825599.670:206005): avc:  denied  { write } for  pid=13875 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=294952463 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825599.912:206029): avc:  denied  { write } for  pid=14095 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=945994803 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-2\[root@west newoe-25-cat-2]#