#/usr/sbin/named
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# # only east should show 1 tunnel, as road was restarted
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# east shows the authnull is matched on preferred non-null connection,
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# east shows the authnull is matched on preferred non-null connection,' <<<<<<<<<<tuc<<<<<<<<<<# then cannot find a (non-authnull) match and rejects it. So an
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# then cannot find a (non-authnull) match and rejects it. So an' <<<<<<<<<<tuc<<<<<<<<<<# additional 'authenticated' partial state lingers
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# additional 'authenticated' partial state lingers' <<<<<<<<<<tuc<<<<<<<<<<ipsec status | grep STATE_
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ipsec status | grep STATE_' <<<<<<<<<<tuc<<<<<<<<<<# verify no packets were dropped due to missing SPD policies
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# verify no packets were dropped due to missing SPD policies' <<<<<<<<<<tuc<<<<<<<<<<grep -v -P "\t0$" /proc/net/xfrm_stat
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep -v -P "\t0$" /proc/net/xfrm_stat' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<<tuc<<<<<<<<<<: ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-auth-authnull\[root@nic newoe-27-replace-sa-auth-authnull]#