/testing/guestbin/swan-prep west # rm /etc/ipsec.d/*db west # ipsec initnss > /dev/null 2> /dev/null west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec whack --impair revival west # ipsec auto --add westnet-eastnet 002 added IKEv1 connection "westnet-eastnet" west # echo "initdone" initdone west # ipsec whack --impair suppress-retransmits west # # this is expected to fail to our own misconfigured key west # ipsec auto --up westnet-eastnet 002 "westnet-eastnet" #1: initiating IKEv1 Main Mode connection 1v1 "westnet-eastnet" #1: sent Main Mode request 1v1 "westnet-eastnet" #1: sent Main Mode I2 003 "westnet-eastnet" #1: private key matching CKAID '4651cb327d8ee9c2a0f71f176c7d172f33205dc2' not found: can't find the private key matching the NSS CKAID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: private key matching CKAID '4651cb327d8ee9c2a0f71f176c7d172f33205dc2' not found: can't find the private key matching the NSS CKAID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: private key matching CKAID '4651cb327d8ee9c2a0f71f176c7d172f33205dc2' not found: can't find the private key matching the NSS CKAID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: private key matching CKAID '4651cb327d8ee9c2a0f71f176c7d172f33205dc2' not found: can't find the private key matching the NSS CKAID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: private key matching CKAID '4651cb327d8ee9c2a0f71f176c7d172f33205dc2' not found: can't find the private key matching the NSS CKAID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 003 "westnet-eastnet" #1: private key matching CKAID '4651cb327d8ee9c2a0f71f176c7d172f33205dc2' not found: can't find the private key matching the NSS CKAID 003 "westnet-eastnet" #1: unable to locate my private key for RSA Signature 224 "westnet-eastnet" #1: sending notification AUTHENTICATION_FAILED to 192.1.2.23:500 002 "westnet-eastnet" #1: deleting state (STATE_MAIN_I2) and NOT sending notification 002 "westnet-eastnet" #1: IMPAIR: skipping revival of connection that is supposed to remain up west # # we should not see any leftover states west # ipsec status |grep STATE_ west # echo done done west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi west #