/testing/guestbin/swan-prep --x509 --x509name key4096
Preparing X.509 files
road #
 ipsec start
Redirecting to: [initsystem]
road #
 /testing/pluto/bin/wait-until-pluto-started
road #
 iptables -I INPUT -p udp -m length --length 0x5dc:0xffff -j LOGDROP
road #
 ipsec auto --add x509
002 added connection description "x509"
road #
 echo done
done
road #
 ipsec auto --up x509
002 "x509" #1: initiating Main Mode
1v1 "x509" #1: STATE_MAIN_I1: initiate
1v1 "x509" #1: STATE_MAIN_I2: sent MI2, expecting MR2
002 "x509" #1: I am sending my cert
002 "x509" #1: I am sending a certificate request
1v1 "x509" #1: STATE_MAIN_I3: sent MI3, expecting MR3
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 0.5 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 1 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 2 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 4 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 8 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 16 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
010 "x509" #1: STATE_MAIN_I3: retransmission; will wait 32 seconds for response
003 "x509" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "x509" #1: received and ignored notification payload: INVALID_ID_INFORMATION
031 "x509" #1: STATE_MAIN_I3: 60 second timeout exceeded after 7 retransmits.  Possible authentication failure: no acceptable response to our first encrypted message
000 "x509" #1: starting keying attempt 2 of an unlimited number, but releasing whack
road #
 echo done
done
road #
 grep "fragment" /tmp/pluto.log
| peer supports fragmentation
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| peer supports fragmentation
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
| sending IKE fragment id '1', number '1'
| sending IKE fragment id '1', number '2'
| sending IKE fragment id '1', number '3'
| sending IKE fragment id '1', number '4'
| sending IKE fragment id '1', number '5' (last)
road #
road #
 ../bin/check-for-core.sh
road #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi