/testing/guestbin/swan-prep --nokeys
Initializing NSS database
west #
 /testing/guestbin/fips.sh on
Password changed successfully.
Setting system policy to FIPS
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
FIPS mode enabled.
west #
 ipsec newhostkey
Generated RSA key pair with CKAID <<CKAID#1>> was stored in the NSS database
The public key can be displayed using: ipsec showhostkey --left --ckaid <<CKAID#1>>
west #
 ipsec showhostkey --list
< 1> RSA keyid: <<KEYID#1>> ckaid: <<CKAID#1>>
west #
 ckaid=$(ipsec showhostkey --list | sed -e 's/.*ckaid: //')
west #
 ipsec showhostkey --left --ckaid "$ckaid"
	# left keyid: <<KEYID#1>>
	leftrsasigkey=0s<<RAW-PUBKEY#1>>
west #
