/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# cp ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# echo "192.1.3.209/32" >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: namespaces direct start via ipsec pluto
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ipsec whack --impair suppress-retransmits
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 northinit.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<#these will create passthroguh shunts
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 northinit.sh '#these will create passthroguh shunts' <<<<<<<<<<tuc<<<<<<<<<<ping -n -c 4 -I 192.1.3.33 192.1.2.23
PING 192.1.2.23 (192.1.2.23) from 192.1.3.33 : 56(84) bytes of data.

--- 192.1.2.23 ping statistics ---
4 packets transmitted, 0 received, 100% packet loss, time 75ms

kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 northinit.sh 'ping -n -c 4 -I 192.1.3.33 192.1.2.23' <<<<<<<<<<tuc<<<<<<<<<<ping -n -c 4 -I 192.1.3.33 192.1.2.45
PING 192.1.2.45 (192.1.2.45) from 192.1.3.33 : 56(84) bytes of data.
64 bytes from 192.1.2.45: icmp_seq=1 ttl=63 time=0.100 ms
64 bytes from 192.1.2.45: icmp_seq=2 ttl=63 time=0.132 ms
64 bytes from 192.1.2.45: icmp_seq=3 ttl=63 time=0.538 ms
64 bytes from 192.1.2.45: icmp_seq=4 ttl=63 time=0.048 ms

--- 192.1.2.45 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 75ms
rtt min/avg/max/mdev = 0.048/0.204/0.538/0.195 ms
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ../../pluto/bin/ipsec-look.sh
==== cut ====
start raw xfrm state:
src 192.1.3.33/32 dst 192.1.3.209/32 \	dir out priority 2088927 ptype main \	tmpl src 0.0.0.0 dst 0.0.0.0\		proto esp reqid 0 mode transport\
src 192.1.2.253/32 dst 192.1.3.33/32 \	dir fwd priority 1564639 ptype main \
src 192.1.2.253/32 dst 192.1.3.33/32 \	dir in priority 1564639 ptype main \
src 192.1.3.33/32 dst 192.1.2.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.3.33/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.253/32 dst 192.1.3.33/32 \	dir in priority 1564639 ptype main \
src 192.1.3.33/32 dst 192.1.3.253/32 \	dir out priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.3.33/32 \	dir fwd priority 1564639 ptype main \
src 192.1.3.254/32 dst 192.1.3.33/32 \	dir in priority 1564639 ptype main \
src 192.1.3.33/32 dst 192.1.3.254/32 \	dir out priority 1564639 ptype main \
end raw xfrm state:
==== tuc ====
north Sat Sep 21 07:32:47 UTC 2019
XFRM state:
XFRM policy:
src 192.1.2.253/32 dst 192.1.3.33/32
	dir fwd priority 1564639 ptype main
src 192.1.2.253/32 dst 192.1.3.33/32
	dir in priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.3.33/32
	dir fwd priority 1564639 ptype main
src 192.1.3.253/32 dst 192.1.3.33/32
	dir in priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.3.33/32
	dir fwd priority 1564639 ptype main
src 192.1.3.254/32 dst 192.1.3.33/32
	dir in priority 1564639 ptype main
src 192.1.3.33/32 dst 192.1.2.253/32
	dir out priority 1564639 ptype main
src 192.1.3.33/32 dst 192.1.3.253/32
	dir out priority 1564639 ptype main
src 192.1.3.33/32 dst 192.1.3.254/32
	dir out priority 1564639 ptype main
src 192.1.3.33/32 dst 192.1.3.209/32
	dir out priority 2088927 ptype main
	tmpl src 0.0.0.0 dst 0.0.0.0
		proto esp reqid 0 mode transport
XFRM done
IPSEC mangle TABLES
NEW_IPSEC_CONN mangle TABLES
ROUTING TABLES
default via 192.1.3.254 dev eth1
192.0.3.0/24 dev eth0 proto kernel scope link src 192.0.3.254
192.1.3.0/24 dev eth1 proto kernel scope link src 192.1.3.33
NSS_CERTIFICATES

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<<tuc<<<<<<<<<<: ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-25-cat-3-4-way\[root@north newoe-25-cat-3-4-way]#