../../guestbin/swan-prep --nokeys
Initializing NSS database
east #
 /testing/x509/import.sh real/mainca/east.p12
 ipsec pk12util -w nss-pw -i real/mainca/east.p12
pk12util: PKCS12 IMPORT SUCCESSFUL
 ipsec certutil -M -n mainca -t CT,,
 ipsec certutil -O -n east
"mainca" [E=testing@libreswan.org,CN=Libreswan test CA for mainca,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA]
  "east" [E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA]
east #
 /testing/x509/import.sh real/mainca/road.end.cert
 ipsec certutil -A -n road -t P,, -i real/mainca/road.end.cert
 ipsec certutil -O -n road
"mainca" [E=testing@libreswan.org,CN=Libreswan test CA for mainca,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA]
  "road" [E=user-road@testing.libreswan.org,CN=road.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA]
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add any-east
"any-east": added oriented IKEv1 connection
east #
 ipsec whack --impair suppress_retransmits
east #
 echo initdone
initdone
east #
 # on EAST, dump the state of the initial SAs
east #
 ipsec _kernel state
src 192.1.2.23 dst 192.1.2.254
	proto esp spi 0xSPISPI reqid REQID mode tunnel
	replay-window 0 flag af-unspec
	auth-trunc hmac(sha1) 0xHASHKEY 96
	enc cbc(aes) 0xENCKEY
	encap type espinudp sport 4500 dport EPHEM addr 0.0.0.0
	dir out
src 192.1.2.254 dst 192.1.2.23
	proto esp spi 0xSPISPI reqid REQID mode tunnel
	replay-window 0 flag af-unspec
	auth-trunc hmac(sha1) 0xHASHKEY 96
	enc cbc(aes) 0xENCKEY
	encap type espinudp sport EPHEM dport 4500 addr 0.0.0.0
	anti-replay esn context:
	 seq-hi 0x0, seq 0xXX, oseq-hi 0x0, oseq 0xXX
	 replay_window 128, bitmap-length 4
	 00000000 00000000 00000000 XXXXXXXX 
	dir in
east #
 ipsec _kernel policy
src 0.0.0.0/0 dst 192.0.2.200/32
	dir out priority PRIORITY ptype main
	tmpl src 192.1.2.23 dst 192.1.2.254
		proto esp reqid REQID mode tunnel
src 192.0.2.200/32 dst 0.0.0.0/0
	dir fwd priority PRIORITY ptype main
	tmpl src 192.1.2.254 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
src 192.0.2.200/32 dst 0.0.0.0/0
	dir in priority PRIORITY ptype main
	tmpl src 192.1.2.254 dst 192.1.2.23
		proto esp reqid REQID mode tunnel
east #
