/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ipsec start
Redirecting to: /etc/init.d/ipsec start
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# # wait for east to initiate to us
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# sleep 30
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ipsec whack --trafficstatus
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# # use delete, not down - because east has auto=start
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ipsec auto --delete west-east-auto
002 "west-east-auto": terminating SAs using this connection
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# # give Delete/Notify some time
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# # no IPsec SA should be there. No ISAKMP SA should be there either
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<ipsec status |grep west-east
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westrun.sh 'ipsec status |grep west-east' <<<<<<<<<<tuc<<<<<<<<<<echo done
done
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# # There should be no established IKE SA and no established IPsec SA
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# only on east, pluto should be attempting to connect to west because it has auto=start
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# only on east, pluto should be attempting to connect to west because it has auto=start' <<<<<<<<<<tuc<<<<<<<<<<ipsec status |grep STATE_
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ipsec status |grep STATE_' <<<<<<<<<<tuc<<<<<<<<<<# confirm the revive conn code triggered
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# confirm the revive conn code triggered' <<<<<<<<<<tuc<<<<<<<<<<hostname | grep east > /dev/null && grep -e 'but must remain up per local policy' -e '^[^|].*EVENT_REVIVE_CONNS' /tmp/pluto.log
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'hostname | grep east > /dev/null && grep -e 'but must remain up per local policy' -e '^[^|].*EVENT_REVIVE_CONNS' /tmp/pluto.log' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566844133.486:265910): avc:  denied  { write } for  pid=7504 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=295084539 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566844133.996:266013): avc:  denied  { write } for  pid=8463 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63889669 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-delete-sa-04\[root@west ikev2-delete-sa-04]#