/testing/guestbin/swan-prep --x509 Preparing X.509 files kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# certutil -D -n east -d sql:/etc/ipsec.d kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: namespaces direct start via ipsec pluto kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# ipsec auto --add san 002 added connection description "san" kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# ipsec whack --impair suppress-retransmits kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# # this should succeed kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# ipsec auto --up san 002 "san" #1: initiating Main Mode 002 "san" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds 102 "san" #1: STATE_MAIN_I1: initiate 002 "san" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds 104 "san" #1: STATE_MAIN_I2: sent MI2, expecting MR2 002 "san" #1: I am sending my cert 002 "san" #1: I am sending a certificate request 002 "san" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds 106 "san" #1: STATE_MAIN_I3: sent MI3, expecting MR3 003 "san" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12 003 "san" #1: received and ignored notification payload: INVALID_ID_INFORMATION kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# echo "done" done kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# # confirm the right ID types were sent/received kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# grep "ID type" /tmp/pluto.log | sort | uniq | ID type: ID_DER_ASN1_DN (0x9) kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert]# ipsec auto --status whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-14-san-dn-fromcert\[root@west ikev1-x509-14-san-dn-fromcert 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<