PRE-TEST moon# ipsec start Starting strongSwan 4.2.10 IPsec [starter]... carol# ipsec start Starting strongSwan 4.2.10 IPsec [starter]... carol# sleep 2 carol# ipsec up home initiating IKE_SA home[1] to 192.168.0.1 generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ] sending packet: from 192.168.0.100[500] to 192.168.0.1[500] received packet: from 192.168.0.1[500] to 192.168.0.100[500] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ ] received cert request for unknown ca with keyid c7:14:49:85:15:17:71:89:14:a4:96:53:2a:1e:e8:01:b2:1c:6a:a5 received cert request for "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" sending cert request for "C=CH, O=Linux strongSwan, CN=strongSwan Root CA" authentication of 'carol@strongswan.org' (myself) with RSA signature successful sending end entity cert "C=CH, O=Linux strongSwan, OU=Research, CN=carol@strongswan.org" establishing CHILD_SA home generating IKE_AUTH request 1 [ IDi CERT CERTREQ IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) ] sending packet: from 192.168.0.100[4500] to 192.168.0.1[4500] received packet: from 192.168.0.1[4500] to 192.168.0.100[4500] parsed IKE_AUTH response 1 [ N(AUTH_FAILED) ] received AUTHENTICATION_FAILED notify error TEST moon# cat /var/log/daemon.log | grep 'certificate was revoked' [YES] Dec 26 11:12:03 moon charon: 13[CFG] certificate was revoked on Jun 21 19:52:14 UTC 2005, reason: unspecified moon# cat /var/log/daemon.log | grep 'authentication of.*carol@strongswan.org.*failed' [YES] Dec 26 11:12:03 moon charon: 13[IKE] authentication of 'carol@strongswan.org' with RSA signature failed carol# cat /var/log/daemon.log | grep 'received AUTHENTICATION_FAILED notify error' [YES] Dec 26 11:12:03 carol charon: 14[IKE] received AUTHENTICATION_FAILED notify error moon# ipsec status | grep 'alice.*ESTABLISHED' [NO] carol# ipsec status | grep 'home.*INSTALLED' [NO] POST-TEST moon# ipsec stop Stopping strongSwan IPsec... carol# ipsec stop Stopping strongSwan IPsec... moon# rm /etc/ipsec.d/cacerts/*