/testing/guestbin/swan-prep
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add westnet-eastnet-ipv4-psk-ikev2
002 "westnet-eastnet-ipv4-psk-ikev2": added IKEv2 connection
east #
 echo "initdone"
initdone
east #
 ipsec stop
Redirecting to: [initsystem]
east #
 # east shows what was sent across the wire; expect two lines for each
east #
 # of the three connections: default (missing); integ=none included;
east #
 # integ=none excluded
east #
 grep 'proposal .* chosen from' /tmp/pluto.log | sed -e 's/SPI=[^;]*/SPI=X/'
"westnet-eastnet-ipv4-psk-ikev2" #1: proposal 1:IKE=AES_GCM_C_128-HMAC_SHA1-MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA1;DH=MODP2048[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #2: proposal 1:ESP=AES_GCM_C_128-DISABLED SPI=X;ESN=DISABLED[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #3: proposal 1:IKE=AES_GCM_C_128-HMAC_SHA1-NONE-MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA1;INTEG=NONE;DH=MODP2048[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #4: proposal 1:ESP=AES_GCM_C_128-NONE-DISABLED SPI=X;INTEG=NONE;ESN=DISABLED[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #5: proposal 1:IKE=AES_GCM_C_128-HMAC_SHA1-MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA1;DH=MODP2048[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #6: proposal 1:ESP=AES_GCM_C_128-DISABLED SPI=X;ESN=DISABLED[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #7: proposal 1:IKE=AES_GCM_C_128-HMAC_SHA1-MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA1;DH=MODP2048[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #8: proposal 1:ESP=AES_GCM_C_128-DISABLED SPI=X;ESN=DISABLED[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #9: proposal 1:IKE=AES_GCM_C_128-HMAC_SHA1-MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA1;DH=MODP2048[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #10: proposal 1:ESP=AES_GCM_C_128-NONE-DISABLED SPI=X;DH=NONE;ESN=DISABLED[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #11: proposal 1:IKE=AES_GCM_C_128-HMAC_SHA1-MODP2048 chosen from remote proposals 1:IKE:ENCR=AES_GCM_C_128;PRF=HMAC_SHA1;DH=MODP2048[first-match]
"westnet-eastnet-ipv4-psk-ikev2" #12: proposal 1:ESP=AES_GCM_C_128-DISABLED SPI=X;ESN=DISABLED[first-match]
east #
 # west shows what came back, expect two lines for each of the three
east #
 # connections: default (missing); integ=none included; integ=none
east #
 # excluded
east #
 grep 'remote accepted' /tmp/pluto.log
east #
 
