/testing/guestbin/swan-prep --nokeys
Creating empty NSS database
east #
 /testing/x509/import.sh real/mainca/`hostname`.all.p12
ipsec pk12util -w nss-pw -i real/mainca/east.all.p12
pk12util: PKCS12 IMPORT SUCCESSFUL
ipsec certutil -M -n mainca -t CT,,
east #
 /testing/x509/import.sh real/mainca/west.end.cert
ipsec certutil -A -n west -t P,, -i real/mainca/west.end.cert
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add westnet-eastnet-ikev2
"westnet-eastnet-ikev2": added IKEv2 connection
east #
 echo "initdone"
initdone
east #
 # expect state #2, state #1 responded with INVALID_KE
east #
 if [ -f /var/run/pluto/pluto.pid ]; then grep " authenticated peer " /tmp/pluto.log ; fi
"westnet-eastnet-ikev2" #1: responder established IKE SA; authenticated peer using preloaded certificate 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org' and 3nnn-bit RSASSA-PSS with SHA2_384 digital signature issued by 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=Libreswan test CA for mainca, E=testing@libreswan.org'
east #
 if [ -f /var/run/charon.pid -o -f /var/run/strongswan/charon.pid ]; then strongswan status ; fi
east #
 
