/testing/guestbin/swan-prep east # cp policies/* /etc/ipsec.d/policies/ east # echo "192.1.2.0/24" >> /etc/ipsec.d/policies/clear-or-private east # cp ikev2-east-oe.conf /etc/ipsec.d/ikev2-oe.conf east # ipsec start Redirecting to: [initsystem] east # /testing/pluto/bin/wait-until-pluto-started east # # give OE policies time to load east # sleep 2 east # echo "initdone" initdone east # ping -n -c 4 10.0.10.1 PING 10.0.10.1 (10.0.10.1) 56(84) bytes of data. --- 10.0.10.1 ping statistics --- 4 packets transmitted, 0 received, 100% packet loss, time XXXX east # ipsec whack --trafficstatus whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) east # iptables -t nat -L -n Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination east # ../../pluto/bin/ipsec-look.sh east NOW XFRM state: XFRM policy: src 192.1.2.23/32 dst 192.1.2.253/32 dir out priority 1564639 ptype main src 192.1.2.23/32 dst 192.1.3.253/32 dir out priority 1564639 ptype main src 192.1.2.23/32 dst 192.1.3.254/32 dir out priority 1564639 ptype main src 192.1.2.253/32 dst 192.1.2.23/32 dir fwd priority 1564639 ptype main src 192.1.2.253/32 dst 192.1.2.23/32 dir in priority 1564639 ptype main src 192.1.3.253/32 dst 192.1.2.23/32 dir fwd priority 1564639 ptype main src 192.1.3.253/32 dst 192.1.2.23/32 dir in priority 1564639 ptype main src 192.1.3.254/32 dst 192.1.2.23/32 dir fwd priority 1564639 ptype main src 192.1.3.254/32 dst 192.1.2.23/32 dir in priority 1564639 ptype main XFRM done IPSEC mangle TABLES NEW_IPSEC_CONN mangle TABLES ROUTING TABLES default via 192.1.2.254 dev eth1 192.0.1.0/24 via 192.1.2.45 dev eth1 192.0.2.0/24 dev eth0 proto kernel scope link src 192.0.2.254 192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.23 NSS_CERTIFICATES Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI east # east # ../bin/check-for-core.sh CORE FOUND: /tmp/core.road.pluto.7733 [New LWP 7733] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments Core was generated by `PATH/libexec/ipsec/pluto --config /etc/ipsec.conf --leak-detective'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f778c80357f in raise () from /lib64/libc.so.6 #0 0x00007f778c80357f in raise () from /lib64/libc.so.6 #1 0x00007f778c7ed895 in abort () from /lib64/libc.so.6 #2 0x00005566806da3b0 in lswlog_passert_suffix (buf=buf@entry=0x7fffb3213190, where=...) at /home/build/libreswan/lib/libswan/lswlog_passert.c:32 #3 0x00005566806cbc37 in lsw_passert_fail (where=..., fmt=fmt@entry=0x556680700321 "%s") at /home/build/libreswan/lib/libswan/lsw_passert_fail.c:31 #4 0x00005566806673e6 in free_signal_handlers () at /home/build/libreswan/programs/pluto/server.c:624 #5 free_pluto_event_list () at /home/build/libreswan/programs/pluto/server.c:671 #6 0x0000556680663f2d in exit_pluto (status=10) at /home/build/libreswan/programs/pluto/plutomain.c:1850 #7 0x000055668062a8b2 in create_lock () at /home/build/libreswan/programs/pluto/plutomain.c:272 #8 main (argc=4, argv=0x7fffb32139e8) at /home/build/libreswan/programs/pluto/plutomain.c:1458 warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments warning: Loadable section ".note.gnu.property" outside of ELF segments east # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi