/testing/guestbin/swan-prep --x509
Preparing X.509 files
east #
 certutil -d sql:/etc/ipsec.d -D -n west
east #
 # replace nic with the nic-no url cert
east #
 certutil -d sql:/etc/ipsec.d -D -n nic
east #
 certutil -A -i /testing/x509/certs/nic-nourl.crt -d sql:/etc/ipsec.d -n nic -t "P,,"
east #
 ipsec start
Redirecting to: systemctl start ipsec.service
east #
 /testing/pluto/bin/wait-until-pluto-started
east #
 ipsec auto --add nss-cert-ocsp
002 added connection description "nss-cert-ocsp"
east #
 echo "initdone"
initdone
east #
 # on east, revocation should show up
east #
 grep "certificate revoked" /tmp/pluto.log
"nss-cert-ocsp" #1: certificate revoked!
east #
east #
 if [ -n "`ls /tmp/core* 2>/dev/null`" ]; then echo CORE FOUND; mv /tmp/core* OUTPUT/; fi
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

