/testing/guestbin/swan-prep --x509 Preparing X.509 files west # certutil -d sql:/etc/ipsec.d -D -n east west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add nss-cert 002 added connection description "nss-cert" west # echo "initdone" initdone west # ipsec whack --impair delete-on-retransmit west # # This is expected to fail because remote cert is not yet valid. west # # It should return whack but it does not? west # ipsec auto --up nss-cert 002 "nss-cert" #1: initiating Main Mode 1v1 "nss-cert" #1: STATE_MAIN_I1: initiate 002 "nss-cert" #1: IMPAIR: retransmit so deleting SA 002 "nss-cert" #1: deleting state (STATE_MAIN_I1) and NOT sending notification west # echo done done west # # only expected to show failure on west west # grep "ERROR" /tmp/pluto.log west # west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi