/testing/guestbin/swan-prep --x509 Preparing X.509 files ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ipsec start Redirecting to: namespaces direct start via ipsec pluto ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# /testing/pluto/bin/wait-until-pluto-started ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ipsec auto --add road-eastnet-ikev2 002 added IKEv2 connection "road-eastnet-ikev2" ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# echo "initdone" initdone ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ipsec whack --impair suppress-retransmits ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ipsec auto --up road-eastnet-ikev2 181 "road-eastnet-ikev2" #1: initiating IKEv2 connection 002 "road-eastnet-ikev2" #1: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds 181 "road-eastnet-ikev2" #1: sent IKE_SA_INIT request 002 "road-eastnet-ikev2" #2: IMPAIR: suppressing retransmits; scheduling timeout in 60 seconds 182 "road-eastnet-ikev2" #1: sent IKE_AUTH request {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} 002 "road-eastnet-ikev2" #1: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA 002 "road-eastnet-ikev2" #2: IKEv2 mode peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org' 003 "road-eastnet-ikev2" #1: authenticated using RSA with SHA2_512 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: route-client output: Error: Peer netns reference is invalid. 002 "road-eastnet-ikev2" #2: negotiated connection [192.1.3.111-192.1.3.111:0-65535 0] -> [192.1.2.23-192.1.2.23:0-65535 0] 004 "road-eastnet-ikev2" #2: IPsec SA established tunnel mode {ESP=>0xd6bd976e <0xcdda7caa xfrm=AES_GCM_16_256-NONE NATOA=none NATD=none DPD=passive} ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# # change ip to a new one and restart pluto ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ip addr del 192.1.3.33/24 dev eth1 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ip addr add 192.1.3.34/24 dev eth1 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ip route add 0.0.0.0/0 via 192.1.3.254 dev eth1 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# killall -9 pluto ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid]# ipsec restart Redirecting to: namespaces whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) pluto: FATAL: lock file "/run/pluto/pluto.pid" already exists | no helper threads to shutdown | delref root_certs@NULL (in free_root_certs() at root_certs.c:127) | certs and keys locked by 'free_preshared_secrets' | certs and keys unlocked by 'free_preshared_secrets' | crl fetch request list locked by 'free_crl_fetch' | crl fetch request list unlocked by 'free_crl_fetch' | updating interfaces - listing interfaces that are going down | server event base not initialized leak: string logger, item size: 64 leak: string logger prefix, item size: 31 leak detective found 2 leaks, total size 95 ]0;root@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid[root@north ikev2-27-uniqueid 10]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 10 northrun.sh 'ipsec restart' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 3 northrun.sh '/testing/pluto/bin/wait-until-pluto-started' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 3 northrun.sh '# temp while the test still fails' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 northrun.sh 'ipsec whack --impair suppress-retransmits' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 255 northrun.sh 'ipsec auto --add road-eastnet-ikev2' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 northrun.sh 'ipsec auto --up road-eastnet-ikev2' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep "already in use" /tmp/pluto.log' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# should only show 1 connection' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi' <<<<<<<<<>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<