/testing/guestbin/swan-prep --x509
echo "192.9.4.245 nic.testing.libreswan.org" >> /etc/hosts
certutil -D -n east -d sql:/etc/ipsec.d
cp /testing/x509/crls/cacrlvalid.crl /etc/ipsec.d/crls
# confirm that the network is alive
ping -n -c 4 192.0.2.254
# make sure that clear text does not get through
iptables -A INPUT -i eth1 -s 192.0.2.0/24 -j DROP
# confirm with a ping
ping -n -c 4 192.0.2.254
ipsec setup start
/testing/pluto/bin/wait-until-pluto-started
ipsec auto --add westnet-eastnet-x509-cr
echo done
