/testing/guestbin/swan-prep --x509 Preparing X.509 files road # ipsec start Redirecting to: [initsystem] road # /testing/pluto/bin/wait-until-pluto-started road # ipsec auto --add road-east 002 added connection description "road-east" road # echo initdone initdone road # ipsec whack --impair drop-xauth-r0 road # # connection will fail to establish road # ipsec whack --xauthname 'use3' --xauthpass 'use1pass' --name road-east --initiate 002 "road-east" #1: initiating Main Mode 1v1 "road-east" #1: STATE_MAIN_I1: initiate 1v1 "road-east" #1: STATE_MAIN_I2: sent MI2, expecting MR2 002 "road-east" #1: I am sending my cert 002 "road-east" #1: I am sending a certificate request 1v1 "road-east" #1: STATE_MAIN_I3: sent MI3, expecting MR3 002 "road-east" #1: Peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org' 002 "road-east" #1: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA 003 "road-east" #1: Authenticated using RSA 004 "road-east" #1: STATE_MAIN_I4: ISAKMP SA established {auth=RSA_SIG cipher=AES_CBC_256 integ=HMAC_SHA2_256 group=MODP2048} 002 "road-east" #1: IMPAIR: drop XAUTH R0 message 200 "road-east" #1: STATE_MAIN_I4: failed 002 "road-east" #1: IMPAIR: drop XAUTH R0 message 200 "road-east" #1: STATE_MAIN_I4: failed 002 "road-east" #1: IMPAIR: drop XAUTH R0 message 200 "road-east" #1: STATE_MAIN_I4: failed 003 "road-east" #1: received Delete SA payload: self-deleting ISAKMP State #1 002 "road-east" #1: deleting state (STATE_MAIN_I4) and sending notification road # ipsec whack --trafficstatus road # echo done done road # grep -E '(inserting|handling) event (EVENT_v1_SEND_XAUTH|EVENT_RETRANSMIT)' OUTPUT/east.pluto.log | inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #1 | inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #1 | handling event EVENT_v1_SEND_XAUTH for parent state #1 | inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #1 | handling event EVENT_RETRANSMIT for parent state #1 | handling event EVENT_RETRANSMIT for 192.1.2.254 "east-road"[1] 192.1.2.254 #1 keying attempt 0 of 1; retransmit 1 | inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #1 | inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #1 | handling event EVENT_v1_SEND_XAUTH for parent state #1 | handling event EVENT_RETRANSMIT for parent state #1 | handling event EVENT_RETRANSMIT for 192.1.2.254 "east-road"[1] 192.1.2.254 #1 keying attempt 0 of 1; retransmit 2 | inserting event EVENT_RETRANSMIT, timeout in 4 seconds for #1 | inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #1 | handling event EVENT_v1_SEND_XAUTH for parent state #1 | handling event EVENT_RETRANSMIT for parent state #1 | handling event EVENT_RETRANSMIT for 192.1.2.254 "east-road"[1] 192.1.2.254 #1 keying attempt 0 of 1; retransmit 3 | inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #2 | inserting event EVENT_v1_SEND_XAUTH, timeout in 0.08 seconds for #2 | handling event EVENT_v1_SEND_XAUTH for parent state #2 | inserting event EVENT_RETRANSMIT, timeout in 2 seconds for #2 road # road # ../bin/check-for-core.sh road # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi