/testing/guestbin/swan-prep kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ipsec start Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Error: Peer netns reference is invalid. Redirecting to: namespaces direct start via ipsec pluto kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ipsec auto --add westnet-eastnet-ikev2 002 added connection description "westnet-eastnet-ikev2" kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# # should be unoriented kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ipsec auto --status | grep westnet-eastnet-ikev2 | grep orient 000 "westnet-eastnet-ikev2": unoriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown; kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ip addr add 192.1.2.24/24 dev eth1 kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ipsec whack --listen 002 listening for IKE messages 002 adding interface eth1/eth1 (esp-hw-offload not supported by kernel) 192.1.2.24:500 002 adding interface eth1/eth1 192.1.2.24:4500 002 forgetting secrets 002 loading secrets from "/etc/ipsec.secrets" 002 loaded private key for keyid: PKK_RSA:AQO9bJbr3 kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# # should be oriented kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ipsec auto --status | grep westnet-eastnet-ikev2 | grep orient 000 "westnet-eastnet-ikev2": oriented; my_ip=unset; their_ip=unset; my_updown=ipsec _updown; kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ../../pluto/bin/ipsec-look.sh ==== cut ==== start raw xfrm state: src 192.0.2.0/24 dst 192.0.1.0/24 \ dir out priority 1042407 ptype main \ tmpl src 192.1.2.24 dst 192.1.2.46\ proto esp reqid 16389 mode tunnel\ src 192.0.1.0/24 dst 192.0.2.0/24 \ dir fwd priority 1042407 ptype main \ tmpl src 192.1.2.46 dst 192.1.2.24\ proto esp reqid 16389 mode tunnel\ src 192.0.1.0/24 dst 192.0.2.0/24 \ dir in priority 1042407 ptype main \ tmpl src 192.1.2.46 dst 192.1.2.24\ proto esp reqid 16389 mode tunnel\ end raw xfrm state: ==== tuc ==== east Sat Sep 21 07:32:55 UTC 2019 XFRM state: src 192.1.2.46 dst 192.1.2.24 proto esp spi 0x6c371e93 reqid 16389 mode tunnel replay-window 32 flag af-unspec aead rfc4106(gcm(aes)) 0x95c2cad581adc7b6c596df666731b38bb1a1ce06c2bed5478a239b3cfae490af9009c989 128 anti-replay context: seq 0x4, oseq 0x0, bitmap 0x0000000f src 192.1.2.24 dst 192.1.2.46 proto esp spi 0xad67857e reqid 16389 mode tunnel replay-window 32 flag af-unspec aead rfc4106(gcm(aes)) 0x5066e2f7b46c60b274834da53624f1530d0dbc3c9fdd588307d080c67171f1c2d93b172c 128 anti-replay context: seq 0x0, oseq 0x4, bitmap 0x00000000 XFRM policy: src 192.0.1.0/24 dst 192.0.2.0/24 dir fwd priority 1042407 ptype main tmpl src 192.1.2.46 dst 192.1.2.24 proto esp reqid 16389 mode tunnel src 192.0.1.0/24 dst 192.0.2.0/24 dir in priority 1042407 ptype main tmpl src 192.1.2.46 dst 192.1.2.24 proto esp reqid 16389 mode tunnel src 192.0.2.0/24 dst 192.0.1.0/24 dir out priority 1042407 ptype main tmpl src 192.1.2.24 dst 192.1.2.46 proto esp reqid 16389 mode tunnel XFRM done IPSEC mangle TABLES NEW_IPSEC_CONN mangle TABLES ROUTING TABLES default via 192.1.2.254 dev eth1 192.0.1.0/24 via 192.1.2.45 dev eth1 192.0.2.0/24 dev eth0 proto kernel scope link src 192.0.2.254 192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.23 NSS_CERTIFICATES Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# : ==== cut ==== kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting]# ipsec auto --status whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-asymmetric-02-orienting\[root@east ikev2-asymmetric-02-orienting 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<