--- road.console.txt 1970-01-01 00:00:00.000000000 +0000 +++ OUTPUT/road.console.txt 2019-08-26 13:26:51.207416541 +0000 @@ -0,0 +1,70 @@ +/testing/guestbin/swan-prep --x509 +Preparing X.509 files +road # + ipsec start +Redirecting to: [initsystem] +road # + /testing/pluto/bin/wait-until-pluto-started +road # + ipsec auto --add road-east +002 added connection description "road-east" +road # + echo initdone +initdone +road # + ipsec whack --impair drop-xauth-r0 +road # + # connection will fail to establish +road # + ipsec whack --xauthname 'use3' --xauthpass 'use1pass' --name road-east --initiate +002 "road-east" #1: initiating Main Mode +1v1 "road-east" #1: STATE_MAIN_I1: initiate +1v1 "road-east" #1: STATE_MAIN_I2: sent MI2, expecting MR2 +002 "road-east" #1: I am sending my cert +002 "road-east" #1: I am sending a certificate request +1v1 "road-east" #1: STATE_MAIN_I3: sent MI3, expecting MR3 +002 "road-east" #1: Peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org' +002 "road-east" #1: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA +003 "road-east" #1: Authenticated using RSA +004 "road-east" #1: STATE_MAIN_I4: ISAKMP SA established {auth=RSA_SIG cipher=AES_CBC_256 integ=HMAC_SHA2_256 group=MODP2048} +002 "road-east" #1: IMPAIR: drop XAUTH R0 message +200 "road-east" #1: STATE_MAIN_I4: failed +002 "road-east" #1: IMPAIR: drop XAUTH R0 message +200 "road-east" #1: STATE_MAIN_I4: failed +002 "road-east" #1: IMPAIR: drop XAUTH R0 message +200 "road-east" #1: STATE_MAIN_I4: failed +003 "road-east" #1: received Delete SA payload: self-deleting ISAKMP State #1 +002 "road-east" #1: deleting state (STATE_MAIN_I4) and sending notification +road # + ipsec whack --trafficstatus +road # + echo done +done +road # + grep -E '(inserting|handling) event (EVENT_v1_SEND_XAUTH|EVENT_RETRANSMIT)' OUTPUT/east.pluto.log +| inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #1 +| inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #1 +| handling event EVENT_v1_SEND_XAUTH for parent state #1 +| inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #1 +| handling event EVENT_RETRANSMIT for parent state #1 +| handling event EVENT_RETRANSMIT for 192.1.2.254 "east-road"[1] 192.1.2.254 #1 keying attempt 0 of 1; retransmit 1 +| inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #1 +| inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #1 +| handling event EVENT_v1_SEND_XAUTH for parent state #1 +| handling event EVENT_RETRANSMIT for parent state #1 +| handling event EVENT_RETRANSMIT for 192.1.2.254 "east-road"[1] 192.1.2.254 #1 keying attempt 0 of 1; retransmit 2 +| inserting event EVENT_RETRANSMIT, timeout in 4 seconds for #1 +| inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #1 +| handling event EVENT_v1_SEND_XAUTH for parent state #1 +| handling event EVENT_RETRANSMIT for parent state #1 +| handling event EVENT_RETRANSMIT for 192.1.2.254 "east-road"[1] 192.1.2.254 #1 keying attempt 0 of 1; retransmit 3 +| inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #2 +| inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #2 +| handling event EVENT_v1_SEND_XAUTH for parent state #2 +| inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #2 +road # +road # + ../bin/check-for-core.sh +road # + if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi +