/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec auto --add westnet-eastnet-ipv4-psk 002 added connection description "westnet-eastnet-ipv4-psk" west # echo "initdone" initdone west # # should fail fast west # ipsec whack --impair ke-payload:0 --impair delete-on-retransmit west # ipsec auto --up westnet-eastnet-ipv4-psk 002 "westnet-eastnet-ipv4-psk" #1: initiating Main Mode 1v1 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I1: initiate 002 "westnet-eastnet-ipv4-psk" #1: IMPAIR: sending bogus KE (g^x) == 0 value to break DH calculations 1v1 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: sent MI2, expecting MR2 217 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 217 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 217 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: INVALID_KEY_INFORMATION 002 "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 west # ipsec whack --impair none whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # # expected to fail with a timeout west # ipsec whack --impair suppress-retransmits whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # ipsec auto --add westnet-eastnet-ipv4-psk connect(pluto_ctl) failed: Connection refused west # ipsec auto --up westnet-eastnet-ipv4-psk whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # echo done done west # grep INVALID_KEY_INFORMATION /tmp/pluto.log | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION | complete v1 state transition with INVALID_KEY_INFORMATION "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500 | Notify Message Type: INVALID_KEY_INFORMATION (0x11) | state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi