/testing/guestbin/swan-prep --nokeys
Initializing NSS database
west #
 ipsec start
Redirecting to: [initsystem]
west #
 ../../guestbin/wait-until-pluto-started
west #
 ipsec auto --add ikev1
"ikev1": added oriented IKEv1 connection
west #
 echo "initdone"
initdone
west #
 ipsec whack --impair timeout_on_retransmit --impair revival
west #
 # should fail
west #
 ipsec auto --up ikev1
"ikev1" #1: initiating IKEv1 Main Mode connection
"ikev1" #1: sent Main Mode request
"ikev1" #1: ignoring unsecured informational payload INVALID_MAJOR_VERSION, length=12
IMPAIR: "ikev1" #1: retransmit so timing out SA (may retry)
"ikev1" #1: connection is supposed to remain up; revival attempt 1 scheduled in 0 seconds
IMPAIR: "ikev1" #1: revival: skip scheduling CONNECTION_REVIVAL event in 0 seconds
"ikev1" #1: deleting ISAKMP SA (MAIN_I1) and NOT sending notification
west #
 # should work normal
west #
 ipsec auto --up ikev2
no connection or alias named "ikev2"
west #
 # should mangle
west #
 ipsec whack --impair major_version_bump
west #
 ipsec auto --up ikev2
no connection or alias named "ikev2"
west #
 echo done
done
west #
 hostname | grep east > /dev/null && ipsec whack --globalstatus | grep -E "total.ike.ikev1.dropped|total.ike.mangled"
west #
 hostname | grep west > /dev/null && ipsec whack --globalstatus | grep -E "total.ike.ikev1.dropped|total.ike.mangled"
total.ike.ikev1.dropped=0
total.ike.mangled=0
west #
 hostname | grep east > /dev/null && grep "sending notification INVALID_MAJOR_VERSION" /tmp/pluto.log
west #
