/testing/guestbin/swan-prep --x509 --x509name key4096 Preparing X.509 files road # ipsec start Redirecting to: [initsystem] road # /testing/pluto/bin/wait-until-pluto-started road # iptables -I INPUT -p udp -m length --length 0x5dc:0xffff -j LOGDROP road # ipsec auto --add x509 002 added connection description "x509" road # echo done done road # ipsec whack --impair delete-on-retransmit road # ipsec auto --up x509 002 "x509" #1: initiating Main Mode 1v1 "x509" #1: STATE_MAIN_I1: initiate 1v1 "x509" #1: STATE_MAIN_I2: sent MI2, expecting MR2 002 "x509" #1: I am sending my cert 002 "x509" #1: I am sending a certificate request 1v1 "x509" #1: STATE_MAIN_I3: sent MI3, expecting MR3 002 "x509" #1: IMPAIR: retransmit so deleting SA 002 "x509" #1: deleting state (STATE_MAIN_I3) and NOT sending notification road # echo done done road # grep "fragment" /tmp/pluto.log road # road # ../bin/check-for-core.sh road # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi