--- north.console.txt 2020-10-28 10:59:11.400392986 +0000 +++ OUTPUT/north.console.txt 2020-10-31 15:25:34.594725095 +0000 @@ -36,25 +36,38 @@ north # ipsec restart Redirecting to: [initsystem] +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) +pluto: FATAL: lock file "/run/pluto/pluto.pid" already exists +| no helper threads to shutdown +| delref root_certs@NULL (in free_root_certs() at root_certs.c:127) +| certs and keys locked by 'free_preshared_secrets' +| certs and keys unlocked by 'free_preshared_secrets' +| crl fetch request list locked by 'free_crl_fetch' +| crl fetch request list unlocked by 'free_crl_fetch' +| updating interfaces - listing interfaces that are going down +| server event base not initialized +leak: string logger, item size: 64 +leak: string logger prefix, item size: 31 +leak detective found 2 leaks, total size 95 north # /testing/pluto/bin/wait-until-pluto-started +● ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec + Loaded: loaded (PATH/lib/systemd/system/ipsec.service; disabled; vendor preset: disabled) + Active: inactive (dead) + Docs: man:ipsec(8) + man:pluto(8) + man:ipsec.conf(5) north # # temp while the test still fails north # ipsec whack --impair suppress-retransmits +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) north # ipsec auto --add road-eastnet-ikev2 -002 added IKEv2 connection "road-eastnet-ikev2" +connect(pluto_ctl) failed: Connection refused north # ipsec auto --up road-eastnet-ikev2 -1v2 "road-eastnet-ikev2" #1: initiating IKEv2 connection -1v2 "road-eastnet-ikev2" #1: sent IKE_SA_INIT request -1v2 "road-eastnet-ikev2" #1: sent IKE_AUTH request {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "road-eastnet-ikev2" #1: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA -002 "road-eastnet-ikev2" #2: IKEv2 mode peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org' -003 "road-eastnet-ikev2" #1: authenticated using RSA with SHA2_512 -002 "road-eastnet-ikev2" #2: negotiated connection [192.1.3.111-192.1.3.111:0-65535 0] -> [192.1.2.23-192.1.2.23:0-65535 0] -004 "road-eastnet-ikev2" #2: IPsec SA established tunnel mode {ESP=>0xESPESP <0xESPESP xfrm=AES_GCM_16_256-NONE NATOA=none NATD=none DPD=passive} +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) north # echo done done @@ -66,7 +79,7 @@ # should only show 1 connection north # ipsec whack --trafficstatus -006 #2: "road-eastnet-ikev2", type=ESP, add_time=1234567890, inBytes=0, outBytes=0, id='C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org' +whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) north # ../bin/check-for-core.sh north #