--- west.console.txt	2019-08-24 18:12:56.325672092 +0000
+++ OUTPUT/west.console.txt	2019-08-26 13:28:58.882946436 +0000
@@ -32,17 +32,13 @@
 1v2 "nss-cert-correct" #1: initiate
 1v2 "nss-cert-correct" #1: STATE_PARENT_I1: sent v2I1, expected v2R1
 1v2 "nss-cert-correct" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048}
-002 "nss-cert-correct" #2: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA
-002 "nss-cert-correct" #2: IKEv2 mode peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org'
-003 "nss-cert-correct" #2: Authenticated using RSA
-002 "nss-cert-correct" #2: negotiated connection [192.0.1.254-192.0.1.254:0-65535 0] -> [192.0.2.254-192.0.2.254:0-65535 0]
-004 "nss-cert-correct" #2: STATE_V2_IPSEC_I: IPsec SA established tunnel mode {ESP=>0xESPESP <0xESPESP xfrm=AES_GCM_16_256-NONE NATOA=none NATD=none DPD=passive}
+002 "nss-cert-correct" #2: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED
+000 "nss-cert-correct" #2: scheduling retry attempt 1 of an unlimited number, but releasing whack
 west #
  ipsec auto --down nss-cert-correct
 002 "nss-cert-correct": terminating SAs using this connection
-002 "nss-cert-correct" #2: deleting state (STATE_V2_IPSEC_I) and sending notification
-005 "nss-cert-correct" #2: ESP traffic information: in=0B out=0B
-002 "nss-cert-correct" #1: deleting state (STATE_PARENT_I3) and sending notification
+002 "nss-cert-correct" #2: deleting state (STATE_PARENT_I2) and NOT sending notification
+002 "nss-cert-correct" #1: deleting state (STATE_PARENT_I2) and NOT sending notification
 west #
  # should fail on mismatched ID
 west #
@@ -51,10 +47,8 @@
 1v2 "nss-cert-incorrect" #3: initiate
 1v2 "nss-cert-incorrect" #3: STATE_PARENT_I1: sent v2I1, expected v2R1
 1v2 "nss-cert-incorrect" #4: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048}
-002 "nss-cert-incorrect" #4: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA
-003 "nss-cert-incorrect" #4: ID_DER_ASN1_DN 'E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA' does not match expected 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=road.testing.libreswan.org, E=user-road@testing.libreswan.org'
-002 "nss-cert-incorrect" #4: Peer public key SubjectAltName does not match peer ID for this connection
-002 "nss-cert-incorrect" #4: X509: CERT payload does not match connection ID
+002 "nss-cert-incorrect" #4: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED
+000 "nss-cert-incorrect" #4: scheduling retry attempt 1 of an unlimited number, but releasing whack
 west #
  echo done
 done