/testing/guestbin/swan-prep
west #
 ipsec start
Redirecting to: systemctl start ipsec.service
west #
 /testing/pluto/bin/wait-until-pluto-started
west #
 ipsec auto --add westnet-eastnet-ipv4-psk
002 added connection description "westnet-eastnet-ipv4-psk"
west #
 echo "initdone"
initdone
west #
 # should fail fast
west #
 ipsec whack --impair ke-payload:0 --impair delete-on-retransmit
west #
 ipsec auto --up  westnet-eastnet-ipv4-psk
002 "westnet-eastnet-ipv4-psk" #1: initiating Main Mode
1v1 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I1: initiate
002 "westnet-eastnet-ipv4-psk" #1: IMPAIR: sending bogus KE (g^x) == 0 value to break DH calculations
1v1 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: sent MI2, expecting MR2
217 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: INVALID_KEY_INFORMATION
002 "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
217 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: INVALID_KEY_INFORMATION
002 "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
217 "westnet-eastnet-ipv4-psk" #1: STATE_MAIN_I2: INVALID_KEY_INFORMATION
002 "westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
002 "westnet-eastnet-ipv4-psk" #1: deleting state (STATE_MAIN_I2) and NOT sending notification
west #
 ipsec whack --impair none
west #
 # expected to fail with a timeout
west #
 ipsec whack --impair suppress-retransmits
west #
 ipsec auto --add  westnet-eastnet-ipv4-psk
002 "westnet-eastnet-ipv4-psk": terminating SAs using this connection
002 "westnet-eastnet-ipv4-psk" #2: deleting state (STATE_MAIN_I2) and NOT sending notification
002 added connection description "westnet-eastnet-ipv4-psk"
west #
 ipsec auto --up  westnet-eastnet-ipv4-psk
002 "westnet-eastnet-ipv4-psk" #3: initiating Main Mode
1v1 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I1: initiate
1v1 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: sent MI2, expecting MR2
217 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: INVALID_KEY_INFORMATION
002 "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
217 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: INVALID_KEY_INFORMATION
002 "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
217 "westnet-eastnet-ipv4-psk" #3: STATE_MAIN_I2: INVALID_KEY_INFORMATION
002 "westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
002 "westnet-eastnet-ipv4-psk" #3: deleting state (STATE_MAIN_I2) and NOT sending notification
west #
 echo done
done
west #
 grep INVALID_KEY_INFORMATION /tmp/pluto.log
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #1: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #2: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #3: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
| complete v1 state transition with INVALID_KEY_INFORMATION
"westnet-eastnet-ipv4-psk" #4: sending notification INVALID_KEY_INFORMATION to 192.1.2.23:500
|    Notify Message Type: INVALID_KEY_INFORMATION (0x11)
| state transition function for STATE_MAIN_I2 failed: INVALID_KEY_INFORMATION
west #
west #
 ../bin/check-for-core.sh
west #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

