/testing/guestbin/swan-prep --x509 --x509name west-nosan
Preparing X.509 files
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# certutil -D -n east -d sql:/etc/ipsec.d
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# # confirm that the network is alive
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ../../pluto/bin/wait-until-alive -I 192.0.1.254 192.0.2.254
destination -I 192.0.1.254 192.0.2.254 is alive
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# # ensure that clear text does not get through
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# iptables -A INPUT -i eth1 -s 192.0.2.0/24 -j LOGDROP
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# iptables -I INPUT -m policy --dir in --pol ipsec -j ACCEPT
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# # confirm clear text does not get through
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ../../pluto/bin/ping-once.sh --down -I 192.0.1.254 192.0.2.254
==== cut ====
ping -q -n -c 1 -i 2 -w 1 -I 192.0.1.254 192.0.2.254
==== tuc ====
==== cut ====
PING 192.0.2.254 (192.0.2.254) from 192.0.1.254 : 56(84) bytes of data.

--- 192.0.2.254 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.031/0.031/0.031/0.000 ms
==== tuc ====
up UNEXPECTED
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 westinit.sh '../../pluto/bin/ping-once.sh --down -I 192.0.1.254 192.0.2.254' <<<<<<<<<<tuc<<<<<<<<<<ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: namespaces direct start via ipsec pluto
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ipsec auto --add ikev2-westnet-eastnet-x509-cr
002 added connection description "ikev2-westnet-eastnet-x509-cr"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ipsec auto --up ikev2-westnet-eastnet-x509-cr
002 "ikev2-westnet-eastnet-x509-cr" #1: initiating Main Mode
002 "ikev2-westnet-eastnet-x509-cr" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
102 "ikev2-westnet-eastnet-x509-cr" #1: STATE_MAIN_I1: initiate
002 "ikev2-westnet-eastnet-x509-cr" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
104 "ikev2-westnet-eastnet-x509-cr" #1: STATE_MAIN_I2: sent MI2, expecting MR2
002 "ikev2-westnet-eastnet-x509-cr" #1: I am sending my cert
002 "ikev2-westnet-eastnet-x509-cr" #1: I am sending a certificate request
002 "ikev2-westnet-eastnet-x509-cr" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds
106 "ikev2-westnet-eastnet-x509-cr" #1: STATE_MAIN_I3: sent MI3, expecting MR3
003 "ikev2-westnet-eastnet-x509-cr" #1: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12
003 "ikev2-westnet-eastnet-x509-cr" #1: received and ignored notification payload: INVALID_ID_INFORMATION
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ping -n -c4 -I 192.0.1.254 192.0.2.254
PING 192.0.2.254 (192.0.2.254) from 192.0.1.254 : 56(84) bytes of data.
64 bytes from 192.0.2.254: icmp_seq=1 ttl=64 time=0.038 ms
64 bytes from 192.0.2.254: icmp_seq=2 ttl=64 time=0.041 ms
64 bytes from 192.0.2.254: icmp_seq=3 ttl=64 time=0.039 ms
64 bytes from 192.0.2.254: icmp_seq=4 ttl=64 time=0.044 ms

--- 192.0.2.254 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 80ms
rtt min/avg/max/mdev = 0.038/0.040/0.044/0.006 ms
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 westrun.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<echo "done"
done
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
end raw xfrm state:
==== tuc ====
west Sat Sep 21 07:29:10 UTC 2019
XFRM state:
XFRM policy:
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.2.254 dev eth1
192.0.1.0/24 dev eth0 proto kernel scope link src 192.0.1.254
192.0.2.0/24 via 192.1.2.23 dev eth1
192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.45
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

Libreswan test CA for mainca - Libreswan                     CT,, 
east-ec                                                      P,,  
hashsha1                                                     P,,  
nic                                                          P,,  
north                                                        P,,  
road                                                         P,,  
west-nosan                                                   u,u,u
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<<tuc<<<<<<<<<<: ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-x509-17-id-any\[root@west ikev1-x509-17-id-any]#