/testing/guestbin/swan-prep --x509 Preparing X.509 files kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# certutil -D -n road -d sql:/etc/ipsec.d kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# certutil -D -n east -d sql:/etc/ipsec.d kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# cp road-ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# cp policies/* /etc/ipsec.d/policies/ kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# echo "192.1.2.23/32" >> /etc/ipsec.d/policies/private-or-clear kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: namespaces direct start via ipsec pluto kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# ipsec whack --impair suppress-retransmits kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# # ensure for tests acquires expire before our failureshunt=2m kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# echo 30 > /proc/sys/net/core/xfrm_acq_expires kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# # give OE policies time to load kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# sleep 5 kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# # send one packet, which gets eaten by XFRM, so east does not initiate kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# ../../pluto/bin/ping-once.sh --down -I 192.1.3.209 192.1.2.23 # should fail ==== cut ==== ping -q -n -c 1 -i 2 -w 1 -I 192.1.3.209 192.1.2.23 ==== tuc ==== ==== cut ==== PING 192.1.2.23 (192.1.2.23) from 192.1.3.209 : 56(84) bytes of data. --- 192.1.2.23 ping statistics --- 1 packets transmitted, 0 received, 100% packet loss, time 0ms ==== tuc ==== down kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# # wait on OE to establish kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host]# ../../pluto/bin/wait-for-whack-trafficstatus.sh private-or-clear whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) timeout after 30 seconds kroot@swantest:/home/build/libreswan/testing/pluto/certoe-09-packet-host\[root@road certoe-09-packet-host 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh '../../pluto/bin/wait-for-whack-trafficstatus.sh private-or-clear' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh '# ping should succeed through tunnel' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 roadrun.sh 'ping -q -w 4 -n -c 2 -I 192.1.3.209 192.1.2.23' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 roadrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<