/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# # prevent stray DNS packets hitting OE - DNS not used on east in this test
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# rm /etc/resolv.conf
rm: cannot remove '/etc/resolv.conf': Device or resource busy
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 eastinit.sh 'rm /etc/resolv.conf' <<<<<<<<<<tuc<<<<<<<<<<touch /etc/resolv.conf
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# echo "192.1.2.0/24"  >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# echo "192.1.3.0/24"  >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# cp ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: namespaces direct start via ipsec pluto
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# sleep 2
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# ../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
src 192.1.2.23/32 dst 192.1.2.0/24 \	dir out priority 2088935 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.23/32 dst 192.1.3.0/24 \	dir out priority 2088935 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.253/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.253/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.2.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.3.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.2.23/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.2.23/32 \	dir in priority 1564639 ptype main \
src 192.1.2.23/32 dst 192.1.3.254/32 \	dir out priority 1564639 ptype main \
end raw xfrm state:
==== tuc ====
east Sat Sep 21 07:32:46 UTC 2019
XFRM state:
XFRM policy:
src 192.1.2.23/32 dst 192.1.2.253/32
	dir out priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.3.253/32
	dir out priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.3.254/32
	dir out priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.2.23/32
	dir fwd priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.2.23/32
	dir in priority 1564639 ptype main
src 192.1.2.23/32 dst 192.1.2.0/24
	dir out priority 2088935 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
src 192.1.2.23/32 dst 192.1.3.0/24
	dir out priority 2088935 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.2.254 dev eth1
192.0.1.0/24 via 192.1.2.45 dev eth1
192.0.2.0/24 dev eth0 proto kernel scope link src 192.0.2.254
192.1.2.0/24 dev eth1 proto kernel scope link src 192.1.2.23
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<<tuc<<<<<<<<<<: ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@east newoe-25-cat-3-4-way]#