forked from libreswan/libreswan
-
Notifications
You must be signed in to change notification settings - Fork 0
/
east.console.txt
47 lines (46 loc) · 1.93 KB
/
east.console.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
/testing/guestbin/swan-prep --x509
Preparing X.509 files
east #
certutil -D -n road -d sql:/etc/ipsec.d
east #
cp east-ikev2-oe.conf /etc/ipsec.d/ikev2-oe.conf
east #
cp policies/* /etc/ipsec.d/policies/
east #
echo "192.1.3.0/24" >> /etc/ipsec.d/policies/clear-or-private
east #
ipsec start
Redirecting to: systemctl start ipsec.service
east #
/testing/pluto/bin/wait-until-pluto-started
east #
ipsec whack --debug-all --impair-retransmits
east #
# give OE policies time to load
east #
sleep 5
east #
echo "initdone"
initdone
east #
# A tunnel should have established with non-zero byte counters
east #
ipsec whack --trafficstatus
006 #2: "clear-or-private#192.1.3.0/24"[1] ...192.1.3.209, type=ESP, add_time=1234567890, inBytes=168, outBytes=168, id='C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=road.testing.libreswan.org, E=user-road@testing.libreswan.org'
east #
grep "negotiated connection" /tmp/pluto.log
"clear-or-private#192.1.3.0/24"[1] ...192.1.3.209 #2: negotiated connection [192.1.2.23-192.1.2.23:0-65535 0] -> [192.1.3.209-192.1.3.209:0-65535 0]
east #
# you should see only Digital Signatures which supports only RSA now
east #
grep IKEv2_AUTH_ OUTPUT/*pluto.log
OUTPUT/east.pluto.log:| auth method: IKEv2_AUTH_DIGSIG (0xe)
OUTPUT/east.pluto.log:| clear-or-private#192.1.3.0/24 #1 not fetching ipseckey that end rsasigkey != %dnsondemand can only query DNS for IPSECKEY for ID that is a FQDN, IPV4_ADDR, or IPV6_ADDR id type=ID_DER_ASN1_DN IKEv2_AUTH_DIGSIG remote=192.1.3.209 thatid=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=road.testing.libreswan.org, E=user-road@testing.libreswan.org
OUTPUT/east.pluto.log:| auth method: IKEv2_AUTH_DIGSIG (0xe)
OUTPUT/road.pluto.log:| auth method: IKEv2_AUTH_DIGSIG (0xe)
OUTPUT/road.pluto.log:| auth method: IKEv2_AUTH_DIGSIG (0xe)
east #
east #
../bin/check-for-core.sh
east #
if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi