PRE-TEST moon# ipsec start Starting strongSwan 4.2.17 IPsec [starter]... carol# ipsec start Starting strongSwan 4.2.17 IPsec [starter]... carol# sleep 2 carol# ipsec up home 002 "home" #1: initiating Main Mode 104 "home" #1: STATE_MAIN_I1: initiate 003 "home" #1: ignoring Vendor ID payload [strongSwan 4.2.17] 003 "home" #1: received Vendor ID payload [XAUTH] 003 "home" #1: received Vendor ID payload [Dead Peer Detection] 106 "home" #1: STATE_MAIN_I2: sent MI2, expecting MR2 002 "home" #1: we have a cert and are sending it upon request 108 "home" #1: STATE_MAIN_I3: sent MI3, expecting MR3 003 "home" #1: ignoring informational payload, type INVALID_KEY_INFORMATION 010 "home" #1: STATE_MAIN_I3: retransmission; will wait 20s for response 003 "home" #1: ignoring informational payload, type INVALID_KEY_INFORMATION 003 "home" #1: discarding duplicate packet; already STATE_MAIN_I3 010 "home" #1: STATE_MAIN_I3: retransmission; will wait 40s for response 003 "home" #1: ignoring informational payload, type INVALID_KEY_INFORMATION 003 "home" #1: discarding duplicate packet; already STATE_MAIN_I3 031 "home" #1: max number of retransmissions (2) reached STATE_MAIN_I3. Possible authentication failure: no acceptable response to our first encrypted message TEST moon# cat /var/log/auth.log | grep 'X.509 certificate rejected' [YES] Jul 20 15:10:00 moon pluto[18712]: "rw"[1] 192.168.0.100 #1: X.509 certificate rejected Jul 20 15:10:09 moon pluto[18712]: "rw"[1] 192.168.0.100 #1: X.509 certificate rejected Jul 20 15:10:29 moon pluto[18712]: "rw"[1] 192.168.0.100 #1: X.509 certificate rejected moon# cat /var/log/auth.log | grep 'certificate was revoked' [YES] Jul 20 15:10:09 moon pluto[18712]: "rw"[1] 192.168.0.100 #1: certificate was revoked on Dec 26 13:54:23 UTC 2004, reason: unspecified Jul 20 15:10:29 moon pluto[18712]: "rw"[1] 192.168.0.100 #1: certificate was revoked on Dec 26 13:54:23 UTC 2004, reason: unspecified carol# cat /var/log/auth.log | grep 'ignoring informational payload, type INVALID_KEY_INFORMATION' [YES] Jul 20 15:10:00 carol pluto[13687]: "home" #1: ignoring informational payload, type INVALID_KEY_INFORMATION Jul 20 15:10:09 carol pluto[13687]: "home" #1: ignoring informational payload, type INVALID_KEY_INFORMATION Jul 20 15:10:29 carol pluto[13687]: "home" #1: ignoring informational payload, type INVALID_KEY_INFORMATION moon# ipsec listocsp | grep ' revoked' [YES] 000 serial: 07, revoked moon# ipsec status | grep 'rw.*STATE_MAIN_R3.*ISAKMP SA established' [NO] carol# ipsec status | grep 'home.*STATE_MAIN_I4.*ISAKMP SA established' [NO] POST-TEST moon# ipsec stop Stopping strongSwan IPsec... carol# ipsec stop Stopping strongSwan IPsec... carol# rm /etc/ipsec.d/private/* carol# rm /etc/ipsec.d/certs/*