/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# echo "192.1.3.0/24"  >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# ipsec auto --add authenticated
002 added connection description "authenticated"
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# # only east should show 1 tunnel, as road was restarted
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# east shows the authnull is matched on preferred non-null connection,
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# east shows the authnull is matched on preferred non-null connection,' <<<<<<<<<<tuc<<<<<<<<<<# then cannot find a (non-authnull) match and rejects it. So an
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# then cannot find a (non-authnull) match and rejects it. So an' <<<<<<<<<<tuc<<<<<<<<<<# additional 'authenticated' partial state lingers
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# additional 'authenticated' partial state lingers' <<<<<<<<<<tuc<<<<<<<<<<ipsec status | grep STATE_
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ipsec status | grep STATE_' <<<<<<<<<<tuc<<<<<<<<<<# verify no packets were dropped due to missing SPD policies
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# verify no packets were dropped due to missing SPD policies' <<<<<<<<<<tuc<<<<<<<<<<grep -v -P "\t0$" /proc/net/xfrm_stat
XfrmOutNoStates         	11
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825630.506:206984): avc:  denied  { write } for  pid=28367 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=1014475949 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825630.757:206998): avc:  denied  { write } for  pid=28679 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63817364 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@east newoe-27-replace-sa-auth-authnull]#