>>>>>>>>>>cut>>>>>>>>>> westinit.sh <<<<<<<<<<tuc<<<<<<<<<</testing/guestbin/swan-prep --x509
Preparing X.509 files
[root@west ikev1-x509-10-san-ip-match]# certutil -D -n east -d sql:/etc/ipsec.d
[root@west ikev1-x509-10-san-ip-match]# ipsec start
Redirecting to: systemctl start ipsec.service
[   12.604963] AVX or AES-NI instructions are not detected.
[   12.610906] AVX or AES-NI instructions are not detected.
[   12.829736] IPv4 over IPsec tunneling driver
[   12.841046] IPsec XFRM device driver
[root@west ikev1-x509-10-san-ip-match]# ../../guestbin/wait-until-pluto-started
==== cut ====
000   PID  Process
addconn exited
==== tuc ====
[root@west ikev1-x509-10-san-ip-match]# ipsec auto --add san
002 "san": added IKEv1 connection
[root@west ikev1-x509-10-san-ip-match]# echo "initdone"
initdone
[root@west ikev1-x509-10-san-ip-match]# >>>>>>>>>>cut>>>>>>>>>> westrun.sh <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --impair suppress-retransmits
[root@west ikev1-x509-10-san-ip-match]# # this should succeed
[root@west ikev1-x509-10-san-ip-match]# ipsec auto --up san
002 "san" #1: initiating IKEv1 Main Mode connection
102 "san" #1: sent Main Mode request
104 "san" #1: sent Main Mode I2
002 "san" #1: I am sending my cert
002 "san" #1: I am sending a certificate request
106 "san" #1: sent Main Mode I3
002 "san" #1: Peer ID is ID_IPV4_ADDR: '192.1.2.23'
003 "san" #1: authenticated using RSA with SHA1 and peer certificate '192.1.2.23' issued by CA 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org'
004 "san" #1: IKE SA established {auth=RSA_SIG cipher=AES_CBC_256 integ=HMAC_SHA2_256 group=MODP2048}
002 "san" #2: initiating Quick Mode IKEv1+RSASIG+ENCRYPT+TUNNEL+PFS+UP+IKE_FRAG_ALLOW+ESN_NO+ESN_YES {using isakmp#1 msgid:f2a94aff proposal=defaults pfsgroup=MODP2048}
115 "san" #2: sent Quick Mode request
[   14.760777] alg: No test for echainiv(authenc(hmac(sha1),cbc(aes))) (echainiv(authenc(hmac(sha1-generic),cbc(aes-generic))))
004 "san" #2: IPsec SA established tunnel mode {ESP=>0x1027ab00 <0xdd15479a xfrm=AES_CBC_128-HMAC_SHA1_96 DPD=passive}
[root@west ikev1-x509-10-san-ip-match]# echo "done"
done
[root@west ikev1-x509-10-san-ip-match]# >>>>>>>>>>cut>>>>>>>>>> final.sh <<<<<<<<<<tuc<<<<<<<<<<# confirm the right ID types were sent/received
[root@west ikev1-x509-10-san-ip-match]# grep "ID type" /tmp/pluto.log | sort | uniq
|    ID type: ID_IPV4_ADDR (0x1)
[root@west ikev1-x509-10-san-ip-match]# >>>>>>>>>> post-mortem >>>>>>>>>>../../guestbin/post-mortem.sh
   PPID     PID    PGID     SID TTY        TPGID STAT   UID   TIME COMMAND
      1     777     777     777 ?             -1 Ssl      0   0:00 /usr/local/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf --nofork
:
: checking shutting down pluto
:
ipsec whack --shutdown
pidof pluto
PASS: shutting down pluto
:
: checking core files
:
PASS: core files
:
: checking memory leaks
:
PASS: memory leaks
:
: checking reference leaks
:
PASS: reference leaks
:
: checking xfrm errors
:
PASS: xfrm errors
:
: checking state/policy entries
:
PASS: state/policy entries
:
: checking selinux audit records
:
PASS: selinux audit records
:
: unload any selinux modules
:
[root@west ikev1-x509-10-san-ip-match]# <<<<<<<<<< post-mortem <<<<<<<<<<>>>>>>>>>>cut>>>>>>>>>> done <<<<<<<<<<tuc<<<<<<<<<<