PRE-TEST

moon# ipsec start
Starting strongSwan 4.2.17 IPsec [starter]...

carol# ipsec start
Starting strongSwan 4.2.17 IPsec [starter]...

carol# sleep 2

carol# ipsec up home
002 "home" #1: initiating Main Mode
104 "home" #1: STATE_MAIN_I1: initiate
003 "home" #1: ignoring Vendor ID payload [strongSwan 4.2.17]
003 "home" #1: received Vendor ID payload [XAUTH]
003 "home" #1: received Vendor ID payload [Dead Peer Detection]
106 "home" #1: STATE_MAIN_I2: sent MI2, expecting MR2
002 "home" #1: we have a cert and are sending it upon request
003 "home" #1: unable to locate my private key for RSA Signature
224 "home" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED
002 "home" #1: sending encrypted notification AUTHENTICATION_FAILED to 192.168.0.1:500
002 "home" #1: we have a cert and are sending it upon request
003 "home" #1: unable to locate my private key for RSA Signature
224 "home" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED
002 "home" #1: sending encrypted notification AUTHENTICATION_FAILED to 192.168.0.1:500
010 "home" #1: STATE_MAIN_I2: retransmission; will wait 20s for response
010 "home" #1: STATE_MAIN_I2: retransmission; will wait 40s for response
002 "home" #1: we have a cert and are sending it upon request
003 "home" #1: unable to locate my private key for RSA Signature
224 "home" #1: STATE_MAIN_I2: AUTHENTICATION_FAILED
002 "home" #1: sending encrypted notification AUTHENTICATION_FAILED to 192.168.0.1:500
031 "home" #1: max number of retransmissions (2) reached STATE_MAIN_I2


TEST

carol# cat /var/log/auth.log | grep 'unable to locate my private key for RSA Signature' [YES]
Jul 20 15:08:27 carol pluto[13570]: "home" #1: unable to locate my private key for RSA Signature
Jul 20 15:08:37 carol pluto[13570]: "home" #1: unable to locate my private key for RSA Signature
Jul 20 15:08:58 carol pluto[13570]: "home" #1: unable to locate my private key for RSA Signature

moon# cat /var/log/auth.log | grep 'ignoring informational payload, type AUTHENTICATION_FAILED' [YES]
Jul 20 15:08:27 moon pluto[18610]: "rw"[1] 192.168.0.100 #1: ignoring informational payload, type AUTHENTICATION_FAILED
Jul 20 15:08:37 moon pluto[18610]: "rw"[1] 192.168.0.100 #1: ignoring informational payload, type AUTHENTICATION_FAILED
Jul 20 15:08:57 moon pluto[18610]: "rw"[1] 192.168.0.100 #1: ignoring informational payload, type AUTHENTICATION_FAILED

moon# ipsec status | grep 'rw.*STATE_MAIN_R3.*ISAKMP SA established' [NO]

carol# ipsec status | grep 'home.*STATE_MAIN_I4.*ISAKMP SA established' [NO]


POST-TEST

moon# ipsec stop
Stopping strongSwan IPsec...

carol# ipsec stop
Stopping strongSwan IPsec...