Feature: nmcli: libreswanStarted: 2024-12-19 05:22:17 (1734582137)Dark modeHigh contrast toggleSummary
Passed: 1
Failed: 0
Started: 2024-12-19 05:22:17 (1734582137)
Duration: 63.54
Finished: 2024-12-19 05:23:21 (1734582201)
Expand AllCollapse AllExpand All Failed
@RHEL-58040
@fedoraver+=43
@rhelver+=9
@libreswan
@ikev2
@libreswan_ikev2_require_id_on_cert_subject
Scenario: nmcli - libreswan - test require ID on certs in subject
Scenario duration: 1.24s
PASS
Before scenario
(1.69s)
(1) write /tmp/pause_faf_reporting
Download
NO DATA
(2,14) Misc
Download
--------------------------------------------------
(2) Command `journalctl --lines=0 --quiet --show-cursor --system`
['journalctl', '--lines=0', '--quiet', '--show-cursor', '--system'] returned 0 in 0.008s
STDOUT:
[NO_EMBED]

--------------------------------------------------
(14) Command `journalctl --lines=0 --quiet --show-cursor --system`
['journalctl', '--lines=0', '--quiet', '--show-cursor', '--system'] returned 0 in 0.007s
STDOUT:
[NO_EMBED]

--------------------------------------------------
(3) write /mnt/tests/NetworkManager-ci/.tmp/nmci-random-seed
Download
2584915959
(4) Status Before Scenario
Download HTMLDownload Plaintext


date '+%Y%m%d-%H%M%S.%N (%s)'

20241219-052217.721848084 (1734582137)



get_rhel_compose

RHEL-10.0-20241217.0



NetworkManager --version

1.51.4-33630.copr.460f0b4bc9.el10



hostnamectl 2>&1

 Static hostname: wifi3-ml5-vm4.tpb.lab.eng.brq.redhat.com
       Icon name: computer-vm
         Chassis: vm 🖴
      Machine ID: f9beeda7ec9f42e7bc31f4c56291b529
         Boot ID: 6de80ed4692d47f5a00a1342ea3976be
    Product UUID: aaf12523-4988-47c0-b4ac-f867deeb5a3d
  Virtualization: kvm
Operating System: Red Hat Enterprise Linux 10.0 (Coughlan)
     CPE OS Name: cpe:/o:redhat:enterprise_linux:10::baseos
          Kernel: Linux 6.12.0-35.el10.x86_64
    Architecture: x86-64
 Hardware Vendor: Red Hat
  Hardware Model: KVM
Firmware Version: 1.16.1-1.el9
   Firmware Date: Tue 2014-04-01
    Firmware Age: 10y 8month 2w 5d



ls -lZ /etc/NetworkManager/system-connections/

total 44
-rw------- 1 root root ? 475 Dec 19 05:17 testeth0.nmconnection
-rw------- 1 root root ? 204 Dec 19 05:06 testeth10.nmconnection
-rw------- 1 root root ? 223 Dec 19 05:15 testeth1.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth2.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth3.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth4.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth5.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth6.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth7.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth8.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth9.nmconnection



ls -lZ /etc/sysconfig/network-scripts/




ls -lZ /tmp/testeth0

-rw------- 1 root root ? 463 Dec 19 01:36 /tmp/testeth0



NetworkManager --print-config

# NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf, /usr/lib/NetworkManager/conf.d/00-server.conf, /etc/NetworkManager/conf.d/{94-nmci-unmanage-orig.conf,95-nmci-test.conf}

[main]
# plugins=
# rc-manager=auto
# migrate-ifcfg-rh=false
# auth-polkit=true
# dhcp=internal
# iwd-config-path=
no-auto-default=*
ignore-carrier=*
debug=RLIMIT_CORE,fatal-warnings
configure-and-quit=no

[keyfile]
unmanaged-devices=interface-name:orig-*

[logging]
# backend=journal
# audit=false
level=TRACE
domains=ALL

[device]
# wifi.backend=wpa_supplicant

# no-auto-default file "/var/lib/NetworkManager/no-auto-default.state"



nmcli -f ALL g

RUNNING  VERSION  STATE      STARTUP  CONNECTIVITY  NETWORKING  WIFI-HW  WIFI     WWAN-HW  WWAN     METERED      
running  1.51.4   connected  started  full          enabled     missing  enabled  missing  enabled  no (guessed) 



nmcli -f ALL d

DEVICE  TYPE      STATE                   IP4-CONNECTIVITY  IP6-CONNECTIVITY  DBUS-PATH                                   CONNECTION  CON-UUID                              CON-PATH                                           
eth0    ethernet  connected               full              full              /org/freedesktop/NetworkManager/Devices/2   testeth0    8d7ebafe-f9dc-418d-af53-a5302afe9071  /org/freedesktop/NetworkManager/ActiveConnection/2 
lo      loopback  connected (externally)  limited           limited           /org/freedesktop/NetworkManager/Devices/1   lo          6966c9ec-bd39-44d2-8487-890a43e02eab  /org/freedesktop/NetworkManager/ActiveConnection/1 
eth1    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/3   --          --                                    --                                                 
eth10   ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/4   --          --                                    --                                                 
eth2    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/5   --          --                                    --                                                 
eth3    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/6   --          --                                    --                                                 
eth4    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/7   --          --                                    --                                                 
eth5    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/8   --          --                                    --                                                 
eth6    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/9   --          --                                    --                                                 
eth7    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/10  --          --                                    --                                                 
eth8    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/11  --          --                                    --                                                 
eth9    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/12  --          --                                    --                                                 



nmcli -f ALL c

NAME       UUID                                  TYPE      TIMESTAMP   TIMESTAMP-REAL                   AUTOCONNECT  AUTOCONNECT-PRIORITY  READONLY  DBUS-PATH                                    ACTIVE  DEVICE  STATE      ACTIVE-PATH                                         SLAVE  FILENAME                                                      
testeth0   8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  1734582113  Thu 19 Dec 2024 05:21:53 AM CET  yes          -100                  no        /org/freedesktop/NetworkManager/Settings/12  yes     eth0    activated  /org/freedesktop/NetworkManager/ActiveConnection/2  --     /etc/NetworkManager/system-connections/testeth0.nmconnection  
lo         6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  1734582113  Thu 19 Dec 2024 05:21:53 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/1   yes     lo      activated  /org/freedesktop/NetworkManager/ActiveConnection/1  --     /run/NetworkManager/system-connections/lo.nmconnection        
testeth1   334ed2cb-0673-46b6-9ece-6aa62862b934  ethernet  1734582043  Thu 19 Dec 2024 05:20:43 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/2   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth1.nmconnection  
testeth10  b7572f02-95a3-43f8-891d-d2c50a07e484  ethernet  1734581314  Thu 19 Dec 2024 05:08:34 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/11  no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth10.nmconnection 
testeth2   3f7a1d49-ac40-4061-8a28-26583c331343  ethernet  1734581961  Thu 19 Dec 2024 05:19:21 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/3   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth2.nmconnection  
testeth3   174d0a56-8ae9-4675-b528-22c25a4af9b1  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/4   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth3.nmconnection  
testeth4   3f452f3d-dea4-4ebb-9a4a-e5f169dab687  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/5   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth4.nmconnection  
testeth5   e49422b3-64ca-415b-9ceb-57f3c78cf694  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/6   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth5.nmconnection  
testeth6   be71cb95-52ee-47e4-b618-f7159d2c9945  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/7   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth6.nmconnection  
testeth7   e26fd81a-19d9-4030-b7ab-a6a1716db7e8  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/8   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth7.nmconnection  
testeth8   93068d40-d865-48ab-9eca-64497fdd15ce  ethernet  1734581261  Thu 19 Dec 2024 05:07:41 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/9   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth8.nmconnection  
testeth9   83ab2657-fd08-4c34-8415-0a8213c82bc1  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/10  no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth9.nmconnection  



nmcli -f ALL d w l




cat /etc/resolv.conf

# Generated by NetworkManager
search tpb.lab.eng.brq.redhat.com lab.eng.brq.redhat.com brq.redhat.com redhat.com
nameserver 10.45.248.15
nameserver 10.38.5.26



ip addr

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host proto kernel_lo 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:01:19:6a brd ff:ff:ff:ff:ff:ff
    altname enp1s0
    inet 10.43.135.17/22 brd 10.43.135.255 scope global dynamic noprefixroute eth0
       valid_lft 86376sec preferred_lft 86376sec
    inet6 2620:52:0:2b86:5054:ff:fe01:196a/64 scope global dynamic noprefixroute 
       valid_lft 2591994sec preferred_lft 604794sec
    inet6 fe80::5054:ff:fe01:196a/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
5: eth1@if4: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether f0:11:22:33:44:55 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
7: eth2@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 46:67:e3:24:40:46 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
9: eth3@if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 52:a8:01:35:1a:45 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
11: eth4@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default qlen 1000
    link/ether 7e:14:f3:30:08:22 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
13: eth5@if12: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether ea:b8:83:fc:51:13 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
15: eth6@if14: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether b6:47:22:fa:63:42 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
17: eth7@if16: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether f2:3c:a2:d7:e5:f3 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
19: eth8@if18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1400 qdisc noqueue state UP group default qlen 1000
    link/ether 32:4b:6d:dd:e3:1a brd ff:ff:ff:ff:ff:ff link-netns vethsetup
21: eth9@if20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether ba:be:3d:5f:e3:2b brd ff:ff:ff:ff:ff:ff link-netns vethsetup
23: eth10@if22: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether aa:89:33:26:8a:c2 brd ff:ff:ff:ff:ff:ff link-netns vethsetup



ip -4 route

default via 10.43.135.254 dev eth0 proto dhcp src 10.43.135.17 metric 99 
10.43.132.0/22 dev eth0 proto kernel scope link src 10.43.135.17 metric 99 



ip -6 route

2620:52:0:2b86::/64 dev eth0 proto ra metric 99 pref medium
fe80::/64 dev eth0 proto kernel metric 1024 pref medium
default via fe80::f6a7:3901:5e6c:5261 dev eth0 proto ra metric 99 pref medium



Veth setup network namespace and DHCP server state:



ip -n vethsetup addr

1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: inbr: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 06:9d:64:ea:bb:e6 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::49d:64ff:feea:bbe6/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
3: masqp@masq: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether 9e:e5:4a:37:f3:88 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::9ce5:4aff:fe37:f388/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
4: eth1p@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether aa:0f:89:88:e7:3f brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::a80f:89ff:fe88:e73f/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
5: masq@masqp: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 02:5e:e6:e6:13:59 brd ff:ff:ff:ff:ff:ff
    inet 192.168.100.1/24 scope global masq
       valid_lft forever preferred_lft forever
    inet6 fe80::5e:e6ff:fee6:1359/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
6: eth2p@if7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether 06:9d:64:ea:bb:e6 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::49d:64ff:feea:bbe6/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
7: simbr: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether fe:cb:29:cf:d4:a2 brd ff:ff:ff:ff:ff:ff
    inet 10.16.1.1/24 scope global simbr
       valid_lft forever preferred_lft forever
    inet6 2620:52:0:1086:fccb:29ff:fecf:d4a2/64 scope global dynamic mngtmpaddr proto kernel_ra 
       valid_lft 1554sec preferred_lft 1554sec
    inet6 2620:52:0:1086::1/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::fccb:29ff:fecf:d4a2/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
8: eth3p@if9: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether c6:40:26:8b:7b:5b brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::c440:26ff:fe8b:7b5b/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
10: eth4p@if11: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether c2:6e:78:81:ad:e8 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::c06e:78ff:fe81:ade8/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
12: eth5p@if13: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether f6:aa:c9:3a:24:fd brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::f4aa:c9ff:fe3a:24fd/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
14: eth6p@if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether a6:db:60:fc:59:58 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::a4db:60ff:fefc:5958/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
16: eth7p@if17: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether 3e:e9:7a:3d:b6:03 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::3ce9:7aff:fe3d:b603/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
18: eth8p@if19: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether de:de:87:27:a1:0f brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::dcde:87ff:fe27:a10f/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
20: eth9p@if21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether b2:32:c4:c3:34:5d brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::b032:c4ff:fec3:345d/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
22: eth10p@if23: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master simbr state UP group default qlen 1000
    link/ether fe:cb:29:cf:d4:a2 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::fccb:29ff:fecf:d4a2/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever



ip -n vethsetup -4 route

10.16.1.0/24 dev simbr proto kernel scope link src 10.16.1.1 
192.168.100.0/24 dev masq proto kernel scope link src 192.168.100.1 



ip -n vethsetup -6 route

2620:52:0:1086::/64 dev simbr proto kernel metric 256 pref medium
fe80::/64 dev eth1p proto kernel metric 256 pref medium
fe80::/64 dev eth2p proto kernel metric 256 pref medium
fe80::/64 dev eth3p proto kernel metric 256 pref medium
fe80::/64 dev eth4p proto kernel metric 256 pref medium
fe80::/64 dev eth5p proto kernel metric 256 pref medium
fe80::/64 dev eth6p proto kernel metric 256 pref medium
fe80::/64 dev eth7p proto kernel metric 256 pref medium
fe80::/64 dev eth8p proto kernel metric 256 pref medium
fe80::/64 dev eth9p proto kernel metric 256 pref medium
fe80::/64 dev masq proto kernel metric 256 pref medium
fe80::/64 dev masqp proto kernel metric 256 pref medium
fe80::/64 dev eth10p proto kernel metric 256 pref medium
fe80::/64 dev inbr proto kernel metric 256 pref medium
fe80::/64 dev simbr proto kernel metric 256 pref medium



ip netns exec vethsetup nft list ruleset




ps aux

USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  1.2  0.1  26448 17232 ?        Ss   01:29   2:55 /usr/lib/systemd/systemd --system --deserialize=54
root           2  0.0  0.0      0     0 ?        S    01:29   0:00 [kthreadd]
root           3  0.0  0.0      0     0 ?        S    01:29   0:00 [pool_workqueue_release]
root           4  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-rcu_gp]
root           5  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-sync_wq]
root           6  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-slub_flushwq]
root           7  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-netns]
root           9  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/0:0H-events_highpri]
root          12  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-mm_percpu_wq]
root          14  0.0  0.0      0     0 ?        I    01:29   0:00 [rcu_tasks_kthread]
root          15  0.0  0.0      0     0 ?        I    01:29   0:00 [rcu_tasks_rude_kthread]
root          16  0.0  0.0      0     0 ?        I    01:29   0:00 [rcu_tasks_trace_kthread]
root          17  0.0  0.0      0     0 ?        S    01:29   0:01 [ksoftirqd/0]
root          18  0.0  0.0      0     0 ?        I    01:29   0:01 [rcu_preempt]
root          19  0.0  0.0      0     0 ?        S    01:29   0:00 [rcu_exp_par_gp_kthread_worker/0]
root          20  0.0  0.0      0     0 ?        S    01:29   0:00 [rcu_exp_gp_kthread_worker]
root          21  0.0  0.0      0     0 ?        S    01:29   0:00 [migration/0]
root          22  0.0  0.0      0     0 ?        S    01:29   0:00 [idle_inject/0]
root          23  0.0  0.0      0     0 ?        S    01:29   0:00 [cpuhp/0]
root          24  0.0  0.0      0     0 ?        S    01:29   0:00 [cpuhp/1]
root          25  0.0  0.0      0     0 ?        S    01:29   0:00 [idle_inject/1]
root          26  0.0  0.0      0     0 ?        S    01:29   0:00 [migration/1]
root          27  0.0  0.0      0     0 ?        S    01:29   0:01 [ksoftirqd/1]
root          29  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/1:0H-events_highpri]
root          30  0.0  0.0      0     0 ?        S    01:29   0:00 [cpuhp/2]
root          31  0.0  0.0      0     0 ?        S    01:29   0:00 [idle_inject/2]
root          32  0.0  0.0      0     0 ?        S    01:29   0:00 [migration/2]
root          33  0.0  0.0      0     0 ?        S    01:29   0:01 [ksoftirqd/2]
root          35  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/2:0H-events_highpri]
root          42  0.0  0.0      0     0 ?        S    01:29   0:00 [kdevtmpfs]
root          43  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-inet_frag_wq]
root          44  0.0  0.0      0     0 ?        S    01:29   0:00 [kauditd]
root          46  0.0  0.0      0     0 ?        S    01:29   0:00 [khungtaskd]
root          47  0.0  0.0      0     0 ?        S    01:29   0:00 [oom_reaper]
root          48  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-writeback]
root          49  0.0  0.0      0     0 ?        S    01:29   0:01 [kcompactd0]
root          50  0.0  0.0      0     0 ?        SN   01:29   0:00 [ksmd]
root          51  0.0  0.0      0     0 ?        SN   01:29   0:01 [khugepaged]
root          52  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-cryptd]
root          53  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kintegrityd]
root          54  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kblockd]
root          55  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/9-acpi]
root          57  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-tpm_dev_wq]
root          58  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-md]
root          59  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-md_bitmap]
root          60  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-edac-poller]
root          61  0.0  0.0      0     0 ?        S    01:29   0:00 [watchdogd]
root          64  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/2:1H-xfs-log/dm-0]
root          65  0.0  0.0      0     0 ?        S    01:29   0:01 [kswapd0]
root          73  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kthrotld]
root          78  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/24-aerdrv]
root          79  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/25-aerdrv]
root          80  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/26-aerdrv]
root          81  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/27-aerdrv]
root          82  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/28-aerdrv]
root          83  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/29-aerdrv]
root          84  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/30-aerdrv]
root          85  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/31-aerdrv]
root          86  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/32-aerdrv]
root          87  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/33-aerdrv]
root          88  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/34-aerdrv]
root          89  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/35-aerdrv]
root          90  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/36-aerdrv]
root          91  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/37-aerdrv]
root          92  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-acpi_thermal_pm]
root          93  0.0  0.0      0     0 ?        S    01:29   0:00 [hwrng]
root          94  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kmpath_rdacd]
root          95  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kaluad]
root          97  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-mld]
root          98  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-ipv6_addrconf]
root         103  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kstrp]
root         110  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u16:0]
root         111  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u17:0-nbd0-recv]
root         112  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u18:0]
root         113  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u19:0]
root         253  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/1:1H-kblockd]
root         480  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-ata_sff]
root         490  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_0]
root         491  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_0]
root         493  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_1]
root         494  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_1]
root         495  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_2]
root         496  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_2]
root         497  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_3]
root         498  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_3]
root         502  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_4]
root         503  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_4]
root         504  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_5]
root         505  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_5]
root         558  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kdmflush/253:0]
root         565  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kdmflush/253:1]
root         601  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfsalloc]
root         602  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs_mru_cache]
root         603  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-buf/dm-0]
root         604  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-conv/dm-0]
root         605  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-reclaim/dm-0]
root         606  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-blockgc/dm-0]
root         607  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-inodegc/dm-0]
root         608  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-log/dm-0]
root         609  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-cil/dm-0]
root         610  0.0  0.0      0     0 ?        S    01:29   0:01 [xfsaild/dm-0]
root         807  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-buf/vda2]
root         808  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-conv/vda2]
root         809  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-reclaim/vda2]
root         810  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-blockgc/vda2]
root         811  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-inodegc/vda2]
root         813  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-log/vda2]
root         814  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-cil/vda2]
root         815  0.0  0.0      0     0 ?        S    01:29   0:00 [xfsaild/vda2]
rpc          826  0.0  0.0  11236  3836 ?        Ss   01:29   0:00 /usr/bin/rpcbind -w -f
root         848  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-rpciod]
root         849  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xprtiod]
root         854  0.0  0.0  19948  2652 ?        S<sl 01:29   0:01 /sbin/auditd
dbus         860  0.0  0.0   9548  4200 ?        Ss   01:29   0:00 /usr/bin/dbus-broker-launch --scope system --audit
dbus         861  0.2  0.0  15508 10668 ?        S    01:29   0:38 dbus-broker --log 4 --controller 9 --machine-id f9beeda7ec9f42e7bc31f4c56291b529 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
root         865  0.0  0.0  80332  3112 ?        Ssl  01:29   0:00 /usr/sbin/irqbalance
root         866  0.0  0.0  97284  2844 ?        Ssl  01:29   0:00 /usr/bin/qemu-ga --method=virtio-serial --path=/dev/virtio-ports/org.qemu.guest_agent.0 --allow-rpcs=guest-sync-delimited,guest-sync,guest-ping,guest-get-time,guest-set-time,guest-info,guest-shutdown,guest-fsfreeze-status,guest-fsfreeze-freeze,guest-fsfreeze-freeze-list,guest-fsfreeze-thaw,guest-fstrim,guest-suspend-disk,guest-suspend-ram,guest-suspend-hybrid,guest-network-get-interfaces,guest-get-vcpus,guest-set-vcpus,guest-get-disks,guest-get-fsinfo,guest-set-user-password,guest-get-memory-blocks,guest-set-memory-blocks,guest-get-memory-block-info,guest-get-host-name,guest-get-users,guest-get-timezone,guest-get-osinfo,guest-get-devices,guest-ssh-get-authorized-keys,guest-ssh-add-authorized-keys,guest-ssh-remove-authorized-keys,guest-get-diskstats,guest-get-cpustats,guest-network-get-route -F/etc/qemu-ga/fsfreeze-hook
root         867  1.2  0.4 948904 48536 ?        Ssl  01:29   2:57 /usr/sbin/rsyslogd -n
root         876  0.0  0.0  17272  7640 ?        Ss   01:29   0:05 /usr/lib/systemd/systemd-logind
root         927  0.0  0.0 120636  5248 ?        Ssl  01:29   0:00 /usr/sbin/gssproxy -D
root         943  0.0  0.0   4068  1624 tty1     Ss+  01:29   0:00 /sbin/agetty -o -p -- \u --noclear - linux
root         948  0.0  0.0   8052  4052 ?        Ss   01:29   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root        4502  0.0  0.0   8224  2804 ?        Ss   01:30   0:00 /usr/sbin/crond -n
root        4507  0.0  0.0 232712  6444 ?        Ssl  01:30   0:04 /usr/bin/restraintd --port 8081
root       22569  0.1  0.1  26652 13728 ?        Ss   01:31   0:17 /usr/lib/systemd/systemd --user
root       22571  0.0  0.0  13280  1976 ?        S    01:31   0:00 (sd-pam)
root       26902  0.0  0.0   7228  2452 ?        S    01:32   0:00 /usr/bin/bash -l /usr/share/restraint/plugins/task_run.d/10_bash_login /usr/share/restraint/plugins/task_run.d/15_beakerlib /usr/share/restraint/plugins/task_run.d/20_unconfined /usr/share/restraint/plugins/task_run.d/25_environment /usr/share/restraint/plugins/task_run.d/30_restore_events /usr/share/restraint/plugins/task_run.d/35_oom_adj make run
root       26931  0.0  0.0   6052  1440 ?        Ss   01:32   0:00 make run
root       26934  0.0  0.0   7236  2520 ?        S    01:32   0:00 /bin/bash ./runtest.sh
root       26977  0.0  0.1 118324 17756 ?        Sl   01:32   0:01 python -u ./harness.py
chrony     27146  0.0  0.0   9784  2520 ?        S    01:32   0:01 /usr/sbin/chronyd -F 2
root       27271  0.0  0.0 327008 10068 ?        Ssl  01:33   0:00 /usr/sbin/abrtd -d -s
root       27279  0.0  0.2 825800 27244 ?        Ss   01:33   0:01 /usr/bin/abrt-dump-journal-oops -fxtD
root       27280  0.0  0.1 818336 22788 ?        Ss   01:33   0:00 /usr/bin/abrt-dump-journal-core -D -T -f -e
root       28203  0.0  0.0   8260  2708 ?        Ss   01:34   0:00 /usr/bin/dbus-broker-launch --scope user
root       28204  0.0  0.0   4572  1936 ?        S    01:34   0:01 dbus-broker --log 4 --controller 9 --machine-id f9beeda7ec9f42e7bc31f4c56291b529 --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
root       29157  0.0  0.0  33100  9132 ?        Ss   01:35   0:12 /usr/lib/systemd/systemd-udevd
root       29257  0.0  0.1 246732 17536 ?        Ss   01:35   0:01 python3 /usr/local/bin/publish_behave_logs
root       29258  0.0  0.0  18120  8876 ?        Ss   01:35   0:00 /usr/sbin/httpd -DFOREGROUND
apache     29268  0.0  0.0  17776  4392 ?        S    01:35   0:00 /usr/sbin/httpd -DFOREGROUND
apache     29269  0.0  0.0 2091240 6612 ?        Sl   01:35   0:02 /usr/sbin/httpd -DFOREGROUND
apache     29270  0.0  0.0 1960104 6500 ?        Sl   01:35   0:01 /usr/sbin/httpd -DFOREGROUND
apache     29272  0.0  0.0 1960104 6372 ?        Sl   01:35   0:01 /usr/sbin/httpd -DFOREGROUND
dnsmasq    30425  0.0  0.0  12336  1788 ?        S    01:36   0:00 dnsmasq --pid-file=/tmp/dhcp_inbr.pid --dhcp-leasefile=/tmp/dhcp_inbr.lease --listen-address=192.168.100.1 --dhcp-range=192.168.100.10,192.168.100.254,240 --interface=masq --bind-interfaces
dnsmasq    30438  0.0  0.0  12336  1768 ?        S    01:36   0:00 dnsmasq --pid-file=/tmp/dhcp_simbr.pid --dhcp-leasefile=/tmp/dhcp_simbr.lease --dhcp-range=10.16.1.10,10.16.1.254,240 --dhcp-range=2620:52:0:1086::10,2620:52:0:1086::1ff,slaac,64,240 --enable-ra --interface=simbr --bind-interfaces
root       63638  0.0  0.0      0     0 ?        I<   01:42   0:00 [kworker/R-cfg80211]
root       67511  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib-comp-wq]
root       67512  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib-comp-unb-wq]
root       67513  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib_mcast]
root       67514  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib_nl_sa_wq]
root       69948  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-tls-strp]
polkitd    79627  0.0  0.0 306692  7812 ?        Ssl  01:47   0:03 /usr/lib/polkit-1/polkitd --no-debug --log-level=err
root      249179  0.0  0.0      0     0 ?        I    03:25   0:02 [kworker/u13:1-flush-253:0]
root      404650  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd0-recv]
root      404651  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd1-recv]
root      404652  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd2-recv]
root      404653  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd3-recv]
root      404655  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd4-recv]
root      404666  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd5-recv]
root      404669  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd6-recv]
root      404672  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd7-recv]
root      404673  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd8-recv]
root      404674  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd9-recv]
root      404678  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd10-recv]
root      404680  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd11-recv]
root      404684  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd12-recv]
root      404685  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd13-recv]
root      404687  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd14-recv]
root      404688  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd15-recv]
root      404710  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/u17:1]
rpcuser   431395  0.0  0.0  10000  2124 ?        Ss   04:07   0:00 /usr/sbin/rpc.statd
root      431404  0.0  0.0   5232  2968 ?        Ss   04:07   0:00 /usr/sbin/nfsdcld
root      431414  0.0  0.0      0     0 ?        I<   04:07   0:00 [kworker/R-iw_cm_wq]
root      431415  0.0  0.0      0     0 ?        I<   04:07   0:00 [kworker/R-rdma_cm]
root      447487  0.0  0.0      0     0 ?        I<   04:33   0:00 [kworker/0:2H-kblockd]
root      450556  0.0  0.0      0     0 ?        I    04:34   0:00 [kworker/u14:0-events_unbound]
root      469691  0.0  0.0      0     0 ?        I    04:41   0:00 [kworker/u13:3-flush-253:0]
root      478416  1.6  2.3 356832 272040 ?       Ss   04:45   0:35 /usr/lib/systemd/systemd-journald
root      481878  0.0  0.0      0     0 ?        I    04:46   0:01 [kworker/2:4-events]
root      481887  0.0  0.0      0     0 ?        I    04:46   0:01 [kworker/0:8-events]
root      482068  0.0  0.0      0     0 ?        I    04:46   0:00 [kworker/u15:2-events_unbound]
root      523651  0.0  0.0      0     0 ?        I    04:52   0:00 [kworker/u15:3-flush-253:0]
root      572776  0.0  0.0      0     0 ?        I    04:59   0:00 [kworker/1:2-cgroup_destroy]
root      573282  0.0  0.0      0     0 ?        I    04:59   0:00 [kworker/u13:0-flush-253:0]
root      603756  0.0  0.0      0     0 ?        I    05:01   0:00 [kworker/0:1-events]
root      604353  0.0  0.0      0     0 ?        I    05:03   0:00 [kworker/u14:3-flush-253:0]
root      610452  0.0  0.0      0     0 ?        I    05:05   0:00 [kworker/2:1-cgroup_destroy]
root      615467  0.0  0.0      0     0 ?        I    05:06   0:00 [kworker/u15:0-events_unbound]
root      622210  0.0  0.0      0     0 ?        I    05:07   0:00 [kworker/1:3-events]
root      624653  0.0  0.2 337676 29748 ?        Ssl  05:08   0:00 /usr/bin/python3 -Es /usr/sbin/tuned -l -P
root      624676  0.0  0.0      0     0 ?        I    05:08   0:00 [kworker/u14:1-events_unbound]
root      628147  0.0  0.0      0     0 ?        I    05:09   0:00 [kworker/u13:4-writeback]
root      637248  0.0  0.0      0     0 ?        I    05:11   0:00 [kworker/u12:1-gid-cache-wq]
root      639715  0.0  0.0      0     0 ?        I    05:12   0:00 [kworker/1:1-cgroup_destroy]
root      640166  0.0  0.0      0     0 ?        I    05:13   0:00 [kworker/0:2-cgroup_destroy]
root      641756  0.0  0.0      0     0 ?        I    05:13   0:00 [kworker/2:0-cgroup_destroy]
root      657924  0.0  0.0      0     0 ?        I    05:16   0:00 [kworker/u14:4-events_unbound]
root      660886  0.0  0.0      0     0 ?        I    05:16   0:00 [kworker/u12:2-netns]
root      671037  0.0  0.0  15320  6856 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-hostnamed
root      672499  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/1:0-events_power_efficient]
root      672545  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/0:0-events]
root      673009  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/2:2-cgroup_destroy]
root      673331  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/u15:1-events_unbound]
root      673980  0.2  0.0 311260  8712 ?        Ssl  05:21   0:00 /usr/libexec/nm-dispatcher
root      675644  2.0  0.1 332184 21312 ?        Ssl  05:21   0:00 /usr/sbin/NetworkManager --no-daemon
root      676546  0.0  0.0   2440  1712 ?        Ss   05:21   0:00 /usr/sbin/pptpd -f
root      677415  0.0  0.0   2496  1016 ?        S    05:22   0:00 /sbin/pptp 127.0.0.1 --nolaunchpppd --loglevel 1 --logstring nm-pptp-service-677395
root      677416  0.0  0.0   2496  1640 ?        S    05:22   0:00 pptpd [127.0.0.1]                    
root      678005  0.4  0.1 256436 16904 ?        Ssl  05:22   0:00 /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf --nofork
root      678039  0.0  0.0  33104  6608 ?        S    05:22   0:00 (udev-worker)
root      678040  0.0  0.0  33104  6344 ?        S    05:22   0:00 (udev-worker)
root      678049  0.0  0.0  33104  6088 ?        S    05:22   0:00 (udev-worker)
root      678051  0.0  0.0  33104  6216 ?        S    05:22   0:00 (udev-worker)
root      678052  0.0  0.0  33104  6088 ?        S    05:22   0:00 (udev-worker)
root      678053  0.0  0.0  33104  6216 ?        S    05:22   0:00 (udev-worker)
root      678054  0.0  0.0  33104  6088 ?        S    05:22   0:00 (udev-worker)
root      678332  0.0  0.0      0     0 ?        Z    05:22   0:00 [python3] <defunct>
root      678341  0.0  0.0  32088 11468 ?        S    05:22   0:00 abrt-server -s
root      678379  0.0  0.0  31480 10892 ?        SN   05:22   0:00 /usr/libexec/abrt-handle-event -i --nice 10 -e notify -- /var/spool/abrt/ccpp-2024-12-19-05:22:15.350370-678100
root      678383  0.0  0.1 327108 12400 ?        Ssl  05:22   0:00 /usr/sbin/abrt-dbus -t133
root      678390  0.0  0.0   6948  3460 ?        SN   05:22   0:00 /bin/sh -c # need comment here. Don't ask me why.         if [ -f /tmp/disable-qe-abrt ] ; then             echo "QE_FAF: reporting disabled, skipping"             rm /var/tmp/qe-faf-processing.$PPID             exit 0         fi         [ -f pkg_name ] && COMPONENT=$(cat pkg_name)         if [ "$COMPONENT" = ""  ] ; then             echo "QE_FAF: crash in unpackaged executable, not reporting"             rm /var/tmp/qe-faf-processing.$PPID             exit 0         fi         # sometimes, we need to wait before processing         PAUSE_TIMEOUT=0         while [ -f /tmp/pause_faf_reporting ] && [ $PAUSE_TIMEOUT -lt 120 ] ; do             echo "QE_FAF: reporting paused, waiting 5s"             sleep 5             PAUSE_TIMEOUT=$(( $PAUSE_TIMEOUT + 5 ))         done         # let's begin         touch /var/tmp/qe-faf-processing.$PPID         ABRT_FORCE_DATA_UPLOAD=${ABRT_FORCE_DATA_UPLOAD:-0}         [ -f /tmp/sth_current_test ] && TASK_SUFFIX=
root      678394 90.4  0.6 822544 74068 ?        RN   05:22   0:01 journalctl -p 6
root      678457  0.0  0.0   7128  3564 ?        S    05:22   0:00 /bin/sh -c run/runtest.sh libreswan_ikev2_require_id_on_cert_subject > result.log 2>&1
root      678459  0.0  0.0   8032  4508 ?        S    05:22   0:00 /bin/bash run/runtest.sh libreswan_ikev2_require_id_on_cert_subject
root      678463  0.0  0.0   5420  1736 ?        S    05:22   0:00 setsid -f -w logger -t runtest
root      678464  0.0  0.0   5420  1804 ?        S    05:22   0:00 setsid -f -w stdbuf -i0 -o0 -e0 tee .tmp/logger_libreswan_ikev2_require_id_on_cert_subject_p
root      678468  0.0  0.0   5464  1892 ?        Ss   05:22   0:00 tee .tmp/logger_libreswan_ikev2_require_id_on_cert_subject_p
root      678469  0.0  0.0   6652  2408 ?        Ss   05:22   0:00 logger -t runtest
root      678541 74.0  0.4 286972 50272 ?        Sl   05:22   0:00 python3l -m behave /mnt/tests/NetworkManager-ci/features/scenarios/libreswan.feature -t RHEL-58040 -t fedoraver+=43 -t rhelver+=9 -t libreswan -t ikev2 -t libreswan_ikev2_require_id_on_cert_subject --no-capture --no-skipped -f html-pretty -o /tmp/report_NetworkManager-ci_Test0956_libreswan_ikev2_require_id_on_cert_subject.html -f plain
root      678560  0.0  0.0      0     0 ?        Z    05:22   0:00 [NetworkManager] <defunct>
root      678561  0.0  0.0      0     0 ?        Z    05:22   0:00 [nmcli] <defunct>
root      678562  0.0  0.0      0     0 ?        Z    05:22   0:00 [nmcli] <defunct>
root      678580  0.0  0.0   4912  1140 ?        R    05:22   0:00 nft list ruleset
root      678581  0.0  0.0   9012  4560 ?        R    05:22   0:00 ps aux
root      678582  0.0  0.0      0     0 ?        Z    05:22   0:00 [free] <defunct>
root      678583  0.0  0.0      0     0 ?        Z    05:22   0:00 [df] <defunct>
root      678584  0.0  0.0      0     0 ?        Z    05:22   0:00 [nft] <defunct>



free -mt

               total        used        free      shared  buff/cache   available
Mem:           11415        1232         732          95        9861       10182
Swap:           5119          25        5094
Total:         16535        1258        5827



df -m

Filesystem                            1M-blocks  Used Available Use% Mounted on
/dev/mapper/rhel_wifi3--ml5--vm4-root     44988 17078     27911  38% /
devtmpfs                                      4     0         4   0% /dev
tmpfs                                      5708     1      5708   1% /dev/shm
tmpfs                                      2284    92      2192   5% /run
/dev/vda2                                   960   221       740  23% /boot
tmpfs                                         1     0         1   0% /run/credentials/getty@tty1.service
tmpfs                                      1142     1      1142   1% /run/user/0
tmpfs                                         1     0         1   0% /run/credentials/systemd-journald.service



lshw -class network -businfo -numeric

Bus info          Device     Class          Description
=======================================================
pci@0000:01:00.0             network        Virtio 1.0 network device [1AF4:1041]
virtio@1          eth0       network        Ethernet interface



nft list ruleset

table inet netavark {
	chain INPUT {
		type filter hook input priority filter; policy accept;
	}

	chain FORWARD {
		type filter hook forward priority filter; policy accept;
		ct state invalid drop
		jump NETAVARK-ISOLATION-1
	}

	chain POSTROUTING {
		type nat hook postrouting priority srcnat; policy accept;
		meta mark & 0x00002000 == 0x00002000 masquerade
	}

	chain PREROUTING {
		type nat hook prerouting priority dstnat; policy accept;
		fib daddr type local jump NETAVARK-HOSTPORT-DNAT
	}

	chain OUTPUT {
		type nat hook output priority dstnat; policy accept;
		fib daddr type local jump NETAVARK-HOSTPORT-DNAT
	}

	chain NETAVARK-HOSTPORT-DNAT {
	}

	chain NETAVARK-HOSTPORT-SETMARK {
		meta mark set meta mark | 0x00002000
	}

	chain NETAVARK-ISOLATION-1 {
	}

	chain NETAVARK-ISOLATION-2 {
	}

	chain NETAVARK-ISOLATION-3 {
		jump NETAVARK-ISOLATION-2
	}
}
table ip filter {
	chain OUTPUT {
		type filter hook output priority filter; policy accept;
	}

	chain INPUT {
		type filter hook input priority filter; policy accept;
	}

	chain FORWARD {
		type filter hook forward priority filter; policy accept;
	}
}
table ip nat {
	chain POSTROUTING {
		type nat hook postrouting priority srcnat; policy accept;
	}
}


Daemon memory consumption: 4048 KiB


Status duration: 0.115s

NMCI_RANDOM_SEED=2584915959

Detected version: ('upstream', [1, 51, 5, 33630]) on ('rhel', [10, 0])
(5) testeth0 check
Download
--------------------------------------------------
(5) Command `nmcli -t -f connection,state device`
['nmcli', '-t', '-f', 'connection,state', 'device'] returned 0 in 0.011s
STDOUT:
testeth0:connected
lo:connected (externally)
:disconnected
:disconnected
:disconnected
:disconnected
:disconnected
:disconnected
:disconnected
:disconnected
:disconnected
:disconnected


--------------------------------------------------
(6..8) Veth
Download
--------------------------------------------------
(6) Command `nmcli connection`
['nmcli', 'connection'] returned 0 in 0.011s
STDOUT:
NAME       UUID                                  TYPE      DEVICE 
testeth0   8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  eth0   
lo         6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  lo     
testeth1   334ed2cb-0673-46b6-9ece-6aa62862b934  ethernet  --     
testeth10  b7572f02-95a3-43f8-891d-d2c50a07e484  ethernet  --     
testeth2   3f7a1d49-ac40-4061-8a28-26583c331343  ethernet  --     
testeth3   174d0a56-8ae9-4675-b528-22c25a4af9b1  ethernet  --     
testeth4   3f452f3d-dea4-4ebb-9a4a-e5f169dab687  ethernet  --     
testeth5   e49422b3-64ca-415b-9ceb-57f3c78cf694  ethernet  --     
testeth6   be71cb95-52ee-47e4-b618-f7159d2c9945  ethernet  --     
testeth7   e26fd81a-19d9-4030-b7ab-a6a1716db7e8  ethernet  --     
testeth8   93068d40-d865-48ab-9eca-64497fdd15ce  ethernet  --     
testeth9   83ab2657-fd08-4c34-8415-0a8213c82bc1  ethernet  --     


--------------------------------------------------
(7) Command `nmcli connection show -a`
['nmcli', 'connection', 'show', '-a'] returned 0 in 0.011s
STDOUT:
NAME      UUID                                  TYPE      DEVICE 
testeth0  8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  eth0   
lo        6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  lo     


--------------------------------------------------
(8) Command `nmcli con show testeth0`
['nmcli', 'con', 'show', 'testeth0'] returned 0 in 0.012s
STDOUT:
connection.id:                          testeth0
connection.uuid:                        8d7ebafe-f9dc-418d-af53-a5302afe9071
connection.stable-id:                   --
connection.type:                        802-3-ethernet
connection.interface-name:              eth0
connection.autoconnect:                 yes
connection.autoconnect-priority:        -100
connection.autoconnect-retries:         1
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582113
connection.permissions:                 --
connection.zone:                        public
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
802-3-ethernet.port:                    --
802-3-ethernet.speed:                   0
802-3-ethernet.duplex:                  --
802-3-ethernet.auto-negotiate:          no
802-3-ethernet.mac-address:             --
802-3-ethernet.cloned-mac-address:      --
802-3-ethernet.generate-mac-address-mask:--
802-3-ethernet.mac-address-denylist:    --
802-3-ethernet.mtu:                     auto
802-3-ethernet.s390-subchannels:        --
802-3-ethernet.s390-nettype:            --
802-3-ethernet.s390-options:            --
802-3-ethernet.wake-on-lan:             default
802-3-ethernet.wake-on-lan-password:    --
802-3-ethernet.accept-all-mac-addresses:-1 (default)
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      99
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      90
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          no
ipv4.required-timeout:                  20000
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      anaconda-Linux
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      99
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     eui64
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      90
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           testeth0
GENERAL.UUID:                           8d7ebafe-f9dc-418d-af53-a5302afe9071
GENERAL.DEVICES:                        eth0
GENERAL.IP-IFACE:                       eth0
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       yes
GENERAL.SPEC-OBJECT:                    --
GENERAL.VPN:                            no
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/2
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/12
GENERAL.ZONE:                           public
GENERAL.MASTER-PATH:                    --
IP4.ADDRESS[1]:                         10.43.135.17/22
IP4.GATEWAY:                            10.43.135.254
IP4.ROUTE[1]:                           dst = 10.43.132.0/22, nh = 0.0.0.0, mt = 99
IP4.ROUTE[2]:                           dst = 0.0.0.0/0, nh = 10.43.135.254, mt = 99
IP4.DNS[1]:                             10.45.248.15
IP4.DNS[2]:                             10.38.5.26
IP4.DOMAIN[1]:                          tpb.lab.eng.brq.redhat.com
IP4.DOMAIN[2]:                          lab.eng.brq.redhat.com
IP4.DOMAIN[3]:                          brq.redhat.com
IP4.DOMAIN[4]:                          redhat.com
DHCP4.OPTION[1]:                        dhcp_client_identifier = 01:52:54:00:01:19:6a
DHCP4.OPTION[2]:                        dhcp_lease_time = 86400
DHCP4.OPTION[3]:                        dhcp_server_identifier = 10.45.248.15
DHCP4.OPTION[4]:                        domain_name = tpb.lab.eng.brq.redhat.com lab.eng.brq.redhat.com brq.redhat.com redhat.com
DHCP4.OPTION[5]:                        domain_name_servers = 10.45.248.15 10.38.5.26
DHCP4.OPTION[6]:                        expiry = 1734668513
DHCP4.OPTION[7]:                        filename = pxelinux.0
DHCP4.OPTION[8]:                        host_name = wifi3-ml5-vm4.tpb.lab.eng.brq.redhat.com
DHCP4.OPTION[9]:                        ip_address = 10.43.135.17
DHCP4.OPTION[10]:                       next_server = 10.44.0.15
DHCP4.OPTION[11]:                       ntp_servers = 10.2.32.38 10.2.32.37 10.11.160.238
DHCP4.OPTION[12]:                       requested_broadcast_address = 1
DHCP4.OPTION[13]:                       requested_domain_name = 1
DHCP4.OPTION[14]:                       requested_domain_name_servers = 1
DHCP4.OPTION[15]:                       requested_domain_search = 1
DHCP4.OPTION[16]:                       requested_host_name = 1
DHCP4.OPTION[17]:                       requested_interface_mtu = 1
DHCP4.OPTION[18]:                       requested_ms_classless_static_routes = 1
DHCP4.OPTION[19]:                       requested_nis_domain = 1
DHCP4.OPTION[20]:                       requested_nis_servers = 1
DHCP4.OPTION[21]:                       requested_ntp_servers = 1
DHCP4.OPTION[22]:                       requested_rfc3442_classless_static_routes = 1
DHCP4.OPTION[23]:                       requested_root_path = 1
DHCP4.OPTION[24]:                       requested_routers = 1
DHCP4.OPTION[25]:                       requested_static_routes = 1
DHCP4.OPTION[26]:                       requested_subnet_mask = 1
DHCP4.OPTION[27]:                       requested_time_offset = 1
DHCP4.OPTION[28]:                       requested_wpad = 1
DHCP4.OPTION[29]:                       routers = 10.43.135.254
DHCP4.OPTION[30]:                       subnet_mask = 255.255.252.0
IP6.ADDRESS[1]:                         2620:52:0:2b86:5054:ff:fe01:196a/64
IP6.ADDRESS[2]:                         fe80::5054:ff:fe01:196a/64
IP6.GATEWAY:                            fe80::f6a7:3901:5e6c:5261
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 1024
IP6.ROUTE[2]:                           dst = 2620:52:0:2b86::/64, nh = ::, mt = 99
IP6.ROUTE[3]:                           dst = ::/0, nh = fe80::f6a7:3901:5e6c:5261, mt = 99


--------------------------------------------------
(9..12) Commands
Download
--------------------------------------------------
(9) Command `rpm -q NetworkManager-libreswan`
['rpm', '-q', 'NetworkManager-libreswan'] returned 0 in 0.006s
STDOUT:
NetworkManager-libreswan-1.2.24-2.el10.x86_64


--------------------------------------------------
(10) Command `rpm -q --qf '%{version}' libreswan`
['rpm', '-q', '--qf', '%{version}', 'libreswan'] returned 0 in 0.006s
STDOUT:
5.1

--------------------------------------------------
(11) Command `rpm --eval '%{lua:
            if rpm.vercmp("5.1", "3.17") < 0 then
                error("Libreswan too old");
            end }'`
['rpm', '--eval', '%{lua:\n            if rpm.vercmp("5.1", "3.17") < 0 then\n                error("Libreswan too old");\n            end }'] returned 0 in 0.004s
STDOUT:



--------------------------------------------------
(12) Command `/usr/sbin/ipsec --checknss`
['/usr/sbin/ipsec', '--checknss'] returned 0 in 0.002s

--------------------------------------------------
(13) Prepare
Download
--------------------------------------------------
(13) Command `'MODE=ikev2 bash prepare/libreswan.sh'`
['MODE=ikev2 bash prepare/libreswan.sh'] (shell) returned 0 in 1.467s
STDOUT:
Redirecting to: systemctl restart ipsec.service
Configuring remote Libreswan peer
 * check namespace...
   FAIL
 * doing libreswan_teardown
 * configuring network...
Connection 'lib1' (e7692682-122b-446e-8615-a9966e683770) successfully added.
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/10)
   OK
import server certificates into libreswan namespace NSS (if not exist yet)...
pk12util: PKCS12 IMPORT SUCCESSFUL
import client certificates into default NSS (if not exist yet)...
pk12util: PKCS12 IMPORT SUCCESSFUL
"roadwarrior_psk": ikev2=yes has been replaced by keyexchange=ikev2
"roadwarrior_psk": added IKEv2 connection
listening for IKE messages
Kernel supports NIC esp-hw-offload
adding interface libreswan0 11.12.13.14:UDP/500
adding interface libreswan0 11.12.13.14:UDP/4500 (NAT)
adding interface lo 127.0.0.1:UDP/500
adding interface lo 127.0.0.1:UDP/4500 (NAT)
adding interface lo [::1]:UDP/500
adding interface lo [::1]:UDP/4500 (NAT)
"roadwarrior_psk": oriented IKEv2 connection (local: left=11.12.13.14  remote: right=0.0.0.0)
forgetting secrets
loading secrets from "/opt/ipsec/ipsec.secrets"

STDERR:
modprobe: FATAL: Module af_key not found in directory /lib/modules/6.12.0-35.el10.x86_64
/usr/libexec/ipsec/pluto:  adjusting ipsec.d to /opt/ipsec
/usr/libexec/ipsec/pluto:  adjusting nssdir to /opt/ipsec/nss


--------------------------------------------------
PASS
* Ensure that version of "NetworkManager-libreswan" package is at least
(0.01s)
features/steps/commands.py:1330
versiondistro
1.2.22-5.el9rhel9
1.2.22-2.el9rhel9.6
1.2.22-2.el9c9s
1.2.22-3.el10rhel10
(15,16) Commands
Download
--------------------------------------------------
(15) Command `rpm -q NetworkManager-libreswan --qf '%{VERSION} %{RELEASE}'`
['rpm', '-q', 'NetworkManager-libreswan', '--qf', '%{VERSION} %{RELEASE}'] returned 0 in 0.006s
STDOUT:
1.2.24 2.el10

--------------------------------------------------
(16) Command `rpm --eval '%{lua:print(rpm.vercmp('"'"'1.2.22 3.el10'"'"', '"'"'1.2.24 2.el10'"'"'))}'`
['rpm', '--eval', "%{lua:print(rpm.vercmp('1.2.22 3.el10', '1.2.24 2.el10'))}"] returned 0 in 0.005s
STDOUT:
-1


--------------------------------------------------
PASS
* Add "libreswan" VPN connection named "libreswan" for device "\*"
(0.01s)
features/steps/vpn.py:7
(17) Commands
Download
--------------------------------------------------
(17) Command `nmcli connection add con-name libreswan type vpn ifname '*' vpn-type libreswan`
['nmcli', 'connection', 'add', 'con-name', 'libreswan', 'type', 'vpn', 'ifname', '*', 'vpn-type', 'libreswan'] returned 0 in 0.013s
STDOUT:
Connection 'libreswan' (cc935ece-b568-4eb5-97b8-0a6960dbc955) successfully added.


--------------------------------------------------
PASS
* Modify connection "libreswan" changing options
(0.02s)
features/steps/connection.py:169
vpn.data "ikev2=insist, leftcert=LibreswanClient, leftid=%fromcert, right=11.12.13.14, rightid=CN=libreswan_server, require-id-on-certificate=yes"
(18) Commands
Download
--------------------------------------------------
(18) Command `nmcli con modify libreswan vpn.data 'ikev2=insist, leftcert=LibreswanClient, leftid=%fromcert, right=11.12.13.14, rightid=CN=libreswan_server, require-id-on-certificate=yes'`
['nmcli', 'con', 'modify', 'libreswan', 'vpn.data', 'ikev2=insist, leftcert=LibreswanClient, leftid=%fromcert, right=11.12.13.14, rightid=CN=libreswan_server, require-id-on-certificate=yes'] returned 0 in 0.016s

--------------------------------------------------
PASS
* Bring "up" connection "libreswan"
(0.11s)
features/steps/connection.py:119
(19) Commands
Download
--------------------------------------------------
(19) Command `nmcli connection up id libreswan`
['nmcli', 'connection', 'up', 'id', 'libreswan'] returned 0 in 0.106s
STDOUT:
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/11)


--------------------------------------------------
PASS
Then "11.12.13.0/24 [^\n]*dev libreswan1" is visible with command "ip route"
(0.00s)
features/steps/commands.py:500
(20) Commands
Download
--------------------------------------------------
(20) Command `'ip route'`
['ip route'] (shell) returned 0 in 0.002s
STDOUT:
0.0.0.0/1 dev libreswan1 proto static scope link src 172.29.100.2 metric 50 
default dev libreswan1 proto static scope link metric 50 
default via 11.12.13.14 dev libreswan1 proto static metric 90 
default via 10.43.135.254 dev eth0 proto dhcp src 10.43.135.17 metric 99 
10.43.132.0/22 dev eth0 proto kernel scope link src 10.43.135.17 metric 99 
11.12.13.0/24 dev libreswan1 proto kernel scope link src 11.12.13.15 metric 90 
11.12.13.14 dev libreswan1 proto static scope link metric 50 
128.0.0.0/1 dev libreswan1 proto static scope link src 172.29.100.2 metric 50 


--------------------------------------------------
PASS
Then "VPN.VPN-STATE:[^\n]*VPN connected" is visible with command "nmcli c show libreswan"
(0.02s)
features/steps/commands.py:500
(21) Commands
Download
--------------------------------------------------
(21) Command `'nmcli c show libreswan'`
['nmcli c show libreswan'] (shell) returned 0 in 0.017s
STDOUT:
connection.id:                          libreswan
connection.uuid:                        cc935ece-b568-4eb5-97b8-0a6960dbc955
connection.stable-id:                   --
connection.type:                        vpn
connection.interface-name:              --
connection.autoconnect:                 yes
connection.autoconnect-priority:        0
connection.autoconnect-retries:         -1 (default)
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582139
connection.permissions:                 --
connection.zone:                        --
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      0 (default)
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.required-timeout:                  -1 (default)
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      --
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     default
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      0 (default)
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
vpn.service-type:                       org.freedesktop.NetworkManager.libreswan
vpn.user-name:                          --
vpn.data:                               ikev2 = insist, leftcert = LibreswanClient, leftid = %fromcert, require-id-on-certificate = yes, right = 11.12.13.14, rightid = CN=libreswan_server
vpn.secrets:                            <hidden>
vpn.persistent:                         no
vpn.timeout:                            0
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           libreswan
GENERAL.UUID:                           cc935ece-b568-4eb5-97b8-0a6960dbc955
GENERAL.DEVICES:                        libreswan1
GENERAL.IP-IFACE:                       libreswan1
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       no
GENERAL.SPEC-OBJECT:                    /org/freedesktop/NetworkManager/ActiveConnection/10
GENERAL.VPN:                            yes
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/11
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/21
GENERAL.ZONE:                           --
GENERAL.MASTER-PATH:                    /org/freedesktop/NetworkManager/Devices/27
IP4.ADDRESS[1]:                         11.12.13.15/24
IP4.GATEWAY:                            11.12.13.14
IP4.ROUTE[1]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[2]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256
VPN.TYPE:                               libreswan
VPN.USERNAME:                           --
VPN.GATEWAY:                            11.12.13.14
VPN.BANNER:                             --
VPN.VPN-STATE:                          5 - VPN connected
VPN.CFG[1]:                             ikev2 = insist
VPN.CFG[2]:                             leftcert = LibreswanClient
VPN.CFG[3]:                             leftid = %fromcert
VPN.CFG[4]:                             require-id-on-certificate = yes
VPN.CFG[5]:                             right = 11.12.13.14
VPN.CFG[6]:                             rightid = CN=libreswan_server


--------------------------------------------------
PASS
Then "IP4.ADDRESS[^\n]*172.29.100.2/32" is visible with command "nmcli c show libreswan"
(0.53s)
features/steps/commands.py:500
(22,23) Commands
Download
--------------------------------------------------
(22) Command `'nmcli c show libreswan'`
['nmcli c show libreswan'] (shell) returned 0 in 0.012s
STDOUT:
connection.id:                          libreswan
connection.uuid:                        cc935ece-b568-4eb5-97b8-0a6960dbc955
connection.stable-id:                   --
connection.type:                        vpn
connection.interface-name:              --
connection.autoconnect:                 yes
connection.autoconnect-priority:        0
connection.autoconnect-retries:         -1 (default)
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582139
connection.permissions:                 --
connection.zone:                        --
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      0 (default)
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.required-timeout:                  -1 (default)
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      --
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     default
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      0 (default)
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
vpn.service-type:                       org.freedesktop.NetworkManager.libreswan
vpn.user-name:                          --
vpn.data:                               ikev2 = insist, leftcert = LibreswanClient, leftid = %fromcert, require-id-on-certificate = yes, right = 11.12.13.14, rightid = CN=libreswan_server
vpn.secrets:                            <hidden>
vpn.persistent:                         no
vpn.timeout:                            0
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           libreswan
GENERAL.UUID:                           cc935ece-b568-4eb5-97b8-0a6960dbc955
GENERAL.DEVICES:                        libreswan1
GENERAL.IP-IFACE:                       libreswan1
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       no
GENERAL.SPEC-OBJECT:                    /org/freedesktop/NetworkManager/ActiveConnection/10
GENERAL.VPN:                            yes
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/11
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/21
GENERAL.ZONE:                           --
GENERAL.MASTER-PATH:                    /org/freedesktop/NetworkManager/Devices/27
IP4.ADDRESS[1]:                         11.12.13.15/24
IP4.GATEWAY:                            11.12.13.14
IP4.ROUTE[1]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[2]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256
VPN.TYPE:                               libreswan
VPN.USERNAME:                           --
VPN.GATEWAY:                            11.12.13.14
VPN.BANNER:                             --
VPN.VPN-STATE:                          5 - VPN connected
VPN.CFG[1]:                             ikev2 = insist
VPN.CFG[2]:                             leftcert = LibreswanClient
VPN.CFG[3]:                             leftid = %fromcert
VPN.CFG[4]:                             require-id-on-certificate = yes
VPN.CFG[5]:                             right = 11.12.13.14
VPN.CFG[6]:                             rightid = CN=libreswan_server


--------------------------------------------------
(23) Command `'nmcli c show libreswan'`
['nmcli c show libreswan'] (shell) returned 0 in 0.013s
STDOUT:
connection.id:                          libreswan
connection.uuid:                        cc935ece-b568-4eb5-97b8-0a6960dbc955
connection.stable-id:                   --
connection.type:                        vpn
connection.interface-name:              --
connection.autoconnect:                 yes
connection.autoconnect-priority:        0
connection.autoconnect-retries:         -1 (default)
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582139
connection.permissions:                 --
connection.zone:                        --
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      0 (default)
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.required-timeout:                  -1 (default)
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      --
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     default
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      0 (default)
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
vpn.service-type:                       org.freedesktop.NetworkManager.libreswan
vpn.user-name:                          --
vpn.data:                               ikev2 = insist, leftcert = LibreswanClient, leftid = %fromcert, require-id-on-certificate = yes, right = 11.12.13.14, rightid = CN=libreswan_server
vpn.secrets:                            <hidden>
vpn.persistent:                         no
vpn.timeout:                            0
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           libreswan
GENERAL.UUID:                           cc935ece-b568-4eb5-97b8-0a6960dbc955
GENERAL.DEVICES:                        libreswan1
GENERAL.IP-IFACE:                       libreswan1
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       no
GENERAL.SPEC-OBJECT:                    /org/freedesktop/NetworkManager/ActiveConnection/10
GENERAL.VPN:                            yes
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/11
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/21
GENERAL.ZONE:                           --
GENERAL.MASTER-PATH:                    /org/freedesktop/NetworkManager/Devices/27
IP4.ADDRESS[1]:                         172.29.100.2/32
IP4.ADDRESS[2]:                         11.12.13.15/24
IP4.GATEWAY:                            0.0.0.0
IP4.ROUTE[1]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[2]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.ROUTE[3]:                           dst = 0.0.0.0/0, nh = 0.0.0.0, mt = 50
IP4.ROUTE[4]:                           dst = 11.12.13.14/32, nh = 0.0.0.0, mt = 50
IP4.ROUTE[5]:                           dst = 0.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.ROUTE[6]:                           dst = 128.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256
VPN.TYPE:                               libreswan
VPN.USERNAME:                           --
VPN.GATEWAY:                            11.12.13.14
VPN.BANNER:                             --
VPN.VPN-STATE:                          5 - VPN connected
VPN.CFG[1]:                             ikev2 = insist
VPN.CFG[2]:                             leftcert = LibreswanClient
VPN.CFG[3]:                             leftid = %fromcert
VPN.CFG[4]:                             require-id-on-certificate = yes
VPN.CFG[5]:                             right = 11.12.13.14
VPN.CFG[6]:                             rightid = CN=libreswan_server


--------------------------------------------------
PASS
Then "IP4.ADDRESS[^\n]*172.29.100.2/32" is visible with command "nmcli d show libreswan1"
(0.01s)
features/steps/commands.py:500
(24) Commands
Download
--------------------------------------------------
(24) Command `'nmcli d show libreswan1'`
['nmcli d show libreswan1'] (shell) returned 0 in 0.012s
STDOUT:
GENERAL.DEVICE:                         libreswan1
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         B2:6F:53:40:02:6A
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     lib1
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/10
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         172.29.100.2/32
IP4.ADDRESS[2]:                         11.12.13.15/24
IP4.GATEWAY:                            0.0.0.0
IP4.ROUTE[1]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[2]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.ROUTE[3]:                           dst = 0.0.0.0/0, nh = 0.0.0.0, mt = 50
IP4.ROUTE[4]:                           dst = 11.12.13.14/32, nh = 0.0.0.0, mt = 50
IP4.ROUTE[5]:                           dst = 0.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.ROUTE[6]:                           dst = 128.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256


--------------------------------------------------
PASS
Then "IP4.ADDRESS[^\n]*11.12.13.15/24" is visible with command "nmcli d show libreswan1"
(0.01s)
features/steps/commands.py:500
(25) Commands
Download
--------------------------------------------------
(25) Command `'nmcli d show libreswan1'`
['nmcli d show libreswan1'] (shell) returned 0 in 0.013s
STDOUT:
GENERAL.DEVICE:                         libreswan1
GENERAL.TYPE:                           ethernet
GENERAL.HWADDR:                         B2:6F:53:40:02:6A
GENERAL.MTU:                            1500
GENERAL.STATE:                          100 (connected)
GENERAL.CONNECTION:                     lib1
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/ActiveConnection/10
WIRED-PROPERTIES.CARRIER:               on
IP4.ADDRESS[1]:                         172.29.100.2/32
IP4.ADDRESS[2]:                         11.12.13.15/24
IP4.GATEWAY:                            0.0.0.0
IP4.ROUTE[1]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[2]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.ROUTE[3]:                           dst = 0.0.0.0/0, nh = 0.0.0.0, mt = 50
IP4.ROUTE[4]:                           dst = 11.12.13.14/32, nh = 0.0.0.0, mt = 50
IP4.ROUTE[5]:                           dst = 0.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.ROUTE[6]:                           dst = 128.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256


--------------------------------------------------
PASS
Then "VPN.GATEWAY:[^\n]*11.12.13.14" is visible with command "nmcli c show libreswan"
(0.01s)
features/steps/commands.py:500
(26) Commands
Download
--------------------------------------------------
(26) Command `'nmcli c show libreswan'`
['nmcli c show libreswan'] (shell) returned 0 in 0.012s
STDOUT:
connection.id:                          libreswan
connection.uuid:                        cc935ece-b568-4eb5-97b8-0a6960dbc955
connection.stable-id:                   --
connection.type:                        vpn
connection.interface-name:              --
connection.autoconnect:                 yes
connection.autoconnect-priority:        0
connection.autoconnect-retries:         -1 (default)
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582139
connection.permissions:                 --
connection.zone:                        --
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      0 (default)
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.required-timeout:                  -1 (default)
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      --
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     default
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      0 (default)
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
vpn.service-type:                       org.freedesktop.NetworkManager.libreswan
vpn.user-name:                          --
vpn.data:                               ikev2 = insist, leftcert = LibreswanClient, leftid = %fromcert, require-id-on-certificate = yes, right = 11.12.13.14, rightid = CN=libreswan_server
vpn.secrets:                            <hidden>
vpn.persistent:                         no
vpn.timeout:                            0
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           libreswan
GENERAL.UUID:                           cc935ece-b568-4eb5-97b8-0a6960dbc955
GENERAL.DEVICES:                        libreswan1
GENERAL.IP-IFACE:                       libreswan1
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       no
GENERAL.SPEC-OBJECT:                    /org/freedesktop/NetworkManager/ActiveConnection/10
GENERAL.VPN:                            yes
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/11
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/21
GENERAL.ZONE:                           --
GENERAL.MASTER-PATH:                    /org/freedesktop/NetworkManager/Devices/27
IP4.ADDRESS[1]:                         172.29.100.2/32
IP4.ADDRESS[2]:                         11.12.13.15/24
IP4.GATEWAY:                            0.0.0.0
IP4.ROUTE[1]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[2]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.ROUTE[3]:                           dst = 0.0.0.0/0, nh = 0.0.0.0, mt = 50
IP4.ROUTE[4]:                           dst = 11.12.13.14/32, nh = 0.0.0.0, mt = 50
IP4.ROUTE[5]:                           dst = 0.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.ROUTE[6]:                           dst = 128.0.0.0/1, nh = 0.0.0.0, mt = 50
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256
VPN.TYPE:                               libreswan
VPN.USERNAME:                           --
VPN.GATEWAY:                            11.12.13.14
VPN.BANNER:                             --
VPN.VPN-STATE:                          5 - VPN connected
VPN.CFG[1]:                             ikev2 = insist
VPN.CFG[2]:                             leftcert = LibreswanClient
VPN.CFG[3]:                             leftid = %fromcert
VPN.CFG[4]:                             require-id-on-certificate = yes
VPN.CFG[5]:                             right = 11.12.13.14
VPN.CFG[6]:                             rightid = CN=libreswan_server


--------------------------------------------------
PASS
* Bring "down" connection "libreswan"
(0.03s)
features/steps/connection.py:119
(27,28) Commands
Download
--------------------------------------------------
(27) Command `nmcli connection show --active`
['nmcli', 'connection', 'show', '--active'] returned 0 in 0.012s
STDOUT:
NAME       UUID                                  TYPE      DEVICE     
libreswan  cc935ece-b568-4eb5-97b8-0a6960dbc955  vpn       libreswan1 
testeth0   8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  eth0       
lib1       e7692682-122b-446e-8615-a9966e683770  ethernet  libreswan1 
lo         6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  lo         


--------------------------------------------------
(28) Command `nmcli connection down id libreswan`
['nmcli', 'connection', 'down', 'id', 'libreswan'] returned 0 in 0.016s
STDOUT:
Connection 'libreswan' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/11)


--------------------------------------------------

Setting rightid to CN=something will force libreswan to match subject directly
and require-id-on-certificate has no effect
PASS
* Modify connection "libreswan" changing options "+vpn.data 'rightid=CN=invalid_cert'"
(0.02s)
features/steps/connection.py:169
(29) Commands
Download
--------------------------------------------------
(29) Command `nmcli con modify libreswan +vpn.data rightid=CN=invalid_cert`
['nmcli', 'con', 'modify', 'libreswan', '+vpn.data', 'rightid=CN=invalid_cert'] returned 0 in 0.019s

--------------------------------------------------
PASS
Then Fail up connection "libreswan" in "10" seconds
(0.08s)
features/steps/connection.py:154
(30) Commands
Download
--------------------------------------------------
(30) Command `nmcli -w 10 connection up id libreswan`
['nmcli', '-w', '10', 'connection', 'up', 'id', 'libreswan'] returned 4 in 0.080s
STDERR:
Error: Connection activation failed: Unknown reason
Hint: use 'journalctl -xe NM_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955 + NM_DEVICE=libreswan1' to get more details.


--------------------------------------------------
PASS
* Execute "nmcli con down id libreswan 2>&1 || true"
(0.01s)
features/steps/commands.py:67
(31) Commands
Download
--------------------------------------------------
(31) Command `'nmcli con down id libreswan 2>&1 || true'`
['nmcli con down id libreswan 2>&1 || true'] (shell) returned 0 in 0.014s
STDOUT:
Error: 'libreswan' is not an active connection.
Error: no active connection provided.


--------------------------------------------------
PASS
* Modify connection "libreswan" changing options "+vpn.data 'require-id-on-certificate=no'"
(0.01s)
features/steps/connection.py:169
(32) Commands
Download
--------------------------------------------------
(32) Command `nmcli con modify libreswan +vpn.data require-id-on-certificate=no`
['nmcli', 'con', 'modify', 'libreswan', '+vpn.data', 'require-id-on-certificate=no'] returned 0 in 0.014s

--------------------------------------------------
PASS
Then Fail up connection "libreswan" in "10" seconds
(0.10s)
features/steps/connection.py:154
(33) Commands
Download
--------------------------------------------------
(33) Command `nmcli -w 10 connection up id libreswan`
['nmcli', '-w', '10', 'connection', 'up', 'id', 'libreswan'] returned 4 in 0.095s
STDERR:
Error: Connection activation failed: Unknown reason
Hint: use 'journalctl -xe NM_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955 + NM_DEVICE=libreswan1' to get more details.


--------------------------------------------------
PASS
* Execute "nmcli con down id libreswan 2>&1 || true"
(0.01s)
features/steps/commands.py:67
(34) Commands
Download
--------------------------------------------------
(34) Command `'nmcli con down id libreswan 2>&1 || true'`
['nmcli con down id libreswan 2>&1 || true'] (shell) returned 0 in 0.013s
STDOUT:
Error: 'libreswan' is not an active connection.
Error: no active connection provided.


--------------------------------------------------

Setting rightid to string without 'CN=' will force libreswan to match subject directly
and require-id-on-certificate should work properly now.
PASS
* Modify connection "libreswan" changing options "+vpn.data 'rightid=invalid_id, require-id-on-certificate=yes'"
(0.02s)
features/steps/connection.py:169
(35) Commands
Download
--------------------------------------------------
(35) Command `nmcli con modify libreswan +vpn.data 'rightid=invalid_id, require-id-on-certificate=yes'`
['nmcli', 'con', 'modify', 'libreswan', '+vpn.data', 'rightid=invalid_id, require-id-on-certificate=yes'] returned 0 in 0.016s

--------------------------------------------------
PASS
Then Fail up connection "libreswan" in "10" seconds
(0.08s)
features/steps/connection.py:154
(36) Commands
Download
--------------------------------------------------
(36) Command `nmcli -w 10 connection up id libreswan`
['nmcli', '-w', '10', 'connection', 'up', 'id', 'libreswan'] returned 4 in 0.080s
STDERR:
Error: Connection activation failed: Unknown reason
Hint: use 'journalctl -xe NM_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955 + NM_DEVICE=libreswan1' to get more details.


--------------------------------------------------
PASS
* Execute "nmcli con down id libreswan 2>&1 || true"
(0.01s)
features/steps/commands.py:67
(37) Commands
Download
--------------------------------------------------
(37) Command `'nmcli con down id libreswan 2>&1 || true'`
['nmcli con down id libreswan 2>&1 || true'] (shell) returned 0 in 0.014s
STDOUT:
Error: 'libreswan' is not an active connection.
Error: no active connection provided.


--------------------------------------------------
PASS
* Modify connection "libreswan" changing options "+vpn.data 'require-id-on-certificate=no'"
(0.02s)
features/steps/connection.py:169
(38) Commands
Download
--------------------------------------------------
(38) Command `nmcli con modify libreswan +vpn.data require-id-on-certificate=no`
['nmcli', 'con', 'modify', 'libreswan', '+vpn.data', 'require-id-on-certificate=no'] returned 0 in 0.019s

--------------------------------------------------
PASS
* Bring "up" connection "libreswan"
(0.09s)
features/steps/connection.py:119
(39) Commands
Download
--------------------------------------------------
(39) Command `nmcli connection up id libreswan`
['nmcli', 'connection', 'up', 'id', 'libreswan'] returned 0 in 0.091s
STDOUT:
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/15)


--------------------------------------------------
PASS
Then "11.12.13.0/24 [^\n]*dev libreswan1" is visible with command "ip route"
(0.00s)
features/steps/commands.py:500
(40) Commands
Download
--------------------------------------------------
(40) Command `'ip route'`
['ip route'] (shell) returned 0 in 0.002s
STDOUT:
0.0.0.0/1 dev libreswan1 proto static scope link src 172.29.100.2 metric 50 
default dev libreswan1 proto static scope link metric 50 
default via 11.12.13.14 dev libreswan1 proto static metric 90 
default via 10.43.135.254 dev eth0 proto dhcp src 10.43.135.17 metric 99 
10.43.132.0/22 dev eth0 proto kernel scope link src 10.43.135.17 metric 99 
11.12.13.0/24 dev libreswan1 proto kernel scope link src 11.12.13.15 metric 90 
11.12.13.14 dev libreswan1 proto static scope link metric 50 
128.0.0.0/1 dev libreswan1 proto static scope link src 172.29.100.2 metric 50 


--------------------------------------------------
PASS
Then "VPN.VPN-STATE:[^\n]*VPN connected" is visible with command "nmcli c show libreswan"
(0.02s)
features/steps/commands.py:500
(41) Commands
Download
--------------------------------------------------
(41) Command `'nmcli c show libreswan'`
['nmcli c show libreswan'] (shell) returned 0 in 0.019s
STDOUT:
connection.id:                          libreswan
connection.uuid:                        cc935ece-b568-4eb5-97b8-0a6960dbc955
connection.stable-id:                   --
connection.type:                        vpn
connection.interface-name:              --
connection.autoconnect:                 yes
connection.autoconnect-priority:        0
connection.autoconnect-retries:         -1 (default)
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582140
connection.permissions:                 --
connection.zone:                        --
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      -1
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      0 (default)
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          yes
ipv4.required-timeout:                  -1 (default)
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      --
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      -1
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     default
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      0 (default)
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
vpn.service-type:                       org.freedesktop.NetworkManager.libreswan
vpn.user-name:                          --
vpn.data:                               ikev2 = insist, leftcert = LibreswanClient, leftid = %fromcert, require-id-on-certificate = no, right = 11.12.13.14, rightid = invalid_id
vpn.secrets:                            <hidden>
vpn.persistent:                         no
vpn.timeout:                            0
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           libreswan
GENERAL.UUID:                           cc935ece-b568-4eb5-97b8-0a6960dbc955
GENERAL.DEVICES:                        libreswan1
GENERAL.IP-IFACE:                       libreswan1
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       no
GENERAL.SPEC-OBJECT:                    /org/freedesktop/NetworkManager/ActiveConnection/10
GENERAL.VPN:                            yes
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/15
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/21
GENERAL.ZONE:                           --
GENERAL.MASTER-PATH:                    /org/freedesktop/NetworkManager/Devices/27
IP4.ADDRESS[1]:                         172.29.100.2/32
IP4.ADDRESS[2]:                         11.12.13.15/24
IP4.GATEWAY:                            0.0.0.0
IP4.ROUTE[1]:                           dst = 11.12.13.0/24, nh = 0.0.0.0, mt = 90
IP4.ROUTE[2]:                           dst = 0.0.0.0/0, nh = 11.12.13.14, mt = 90
IP4.ROUTE[3]:                           dst = 0.0.0.0/0, nh = 0.0.0.0, mt = 50
IP4.DNS[1]:                             11.12.13.14
IP4.DNS[2]:                             8.8.8.8
IP6.GATEWAY:                            --
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 256
VPN.TYPE:                               libreswan
VPN.USERNAME:                           --
VPN.GATEWAY:                            11.12.13.14
VPN.BANNER:                             --
VPN.VPN-STATE:                          5 - VPN connected
VPN.CFG[1]:                             ikev2 = insist
VPN.CFG[2]:                             leftcert = LibreswanClient
VPN.CFG[3]:                             leftid = %fromcert
VPN.CFG[4]:                             require-id-on-certificate = no
VPN.CFG[5]:                             right = 11.12.13.14
VPN.CFG[6]:                             rightid = invalid_id


--------------------------------------------------
FAIL
After scenario
(60.45s)
(42..45,48..51) Cleanup
Download
--------------------------------------------------
(42) Command `nmcli connection down libreswan`
['nmcli', 'connection', 'down', 'libreswan'] returned 0 in 0.012s
STDOUT:
Connection 'libreswan' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/15)


--------------------------------------------------
(43) Command `nmcli connection delete libreswan`
['nmcli', 'connection', 'delete', 'libreswan'] returned 0 in 0.025s
STDOUT:
Connection 'libreswan' (cc935ece-b568-4eb5-97b8-0a6960dbc955) successfully deleted.


--------------------------------------------------
(44) Command `bash prepare/libreswan.sh teardown`
['bash', 'prepare/libreswan.sh', 'teardown'] returned 0 in 0.057s
STDOUT:
Connection 'lib1' (e7692682-122b-446e-8615-a9966e683770) successfully deleted.


--------------------------------------------------
(45) Command `journalctl --all --no-pager -t pluto '--cursor=s=093742d556364291aa2d2129c128c1ed;i=8afc19;b=6de80ed4692d47f5a00a1342ea3976be;m=33f6494c4;t=62997e04008f8;x=90f2aae98ff4abc0' -o cat`
['journalctl', '--all', '--no-pager', '-t', 'pluto', '--cursor=s=093742d556364291aa2d2129c128c1ed;i=8afc19;b=6de80ed4692d47f5a00a1342ea3976be;m=33f6494c4;t=62997e04008f8;x=90f2aae98ff4abc0', '-o', 'cat'] returned 0 in 0.006s
STDOUT:
[NO_EMBED]

--------------------------------------------------
(48) Command `nmcli connection`
['nmcli', 'connection'] returned 0 in 0.017s
STDOUT:
NAME       UUID                                  TYPE      DEVICE 
testeth0   8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  eth0   
lo         6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  lo     
testeth1   334ed2cb-0673-46b6-9ece-6aa62862b934  ethernet  --     
testeth10  b7572f02-95a3-43f8-891d-d2c50a07e484  ethernet  --     
testeth2   3f7a1d49-ac40-4061-8a28-26583c331343  ethernet  --     
testeth3   174d0a56-8ae9-4675-b528-22c25a4af9b1  ethernet  --     
testeth4   3f452f3d-dea4-4ebb-9a4a-e5f169dab687  ethernet  --     
testeth5   e49422b3-64ca-415b-9ceb-57f3c78cf694  ethernet  --     
testeth6   be71cb95-52ee-47e4-b618-f7159d2c9945  ethernet  --     
testeth7   e26fd81a-19d9-4030-b7ab-a6a1716db7e8  ethernet  --     
testeth8   93068d40-d865-48ab-9eca-64497fdd15ce  ethernet  --     
testeth9   83ab2657-fd08-4c34-8415-0a8213c82bc1  ethernet  --     


--------------------------------------------------
(49) Command `nmcli connection show -a`
['nmcli', 'connection', 'show', '-a'] returned 0 in 0.012s
STDOUT:
NAME      UUID                                  TYPE      DEVICE 
testeth0  8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  eth0   
lo        6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  lo     


--------------------------------------------------
(50) Command `nmcli con show testeth0`
['nmcli', 'con', 'show', 'testeth0'] returned 0 in 0.020s
STDOUT:
connection.id:                          testeth0
connection.uuid:                        8d7ebafe-f9dc-418d-af53-a5302afe9071
connection.stable-id:                   --
connection.type:                        802-3-ethernet
connection.interface-name:              eth0
connection.autoconnect:                 yes
connection.autoconnect-priority:        -100
connection.autoconnect-retries:         1
connection.multi-connect:               0 (default)
connection.auth-retries:                -1
connection.timestamp:                   1734582113
connection.permissions:                 --
connection.zone:                        public
connection.controller:                  --
connection.master:                      --
connection.slave-type:                  --
connection.port-type:                   --
connection.autoconnect-slaves:          -1 (default)
connection.autoconnect-ports:           -1 (default)
connection.down-on-poweroff:            -1 (default)
connection.secondaries:                 --
connection.gateway-ping-timeout:        0
connection.ip-ping-timeout:             0
connection.ip-ping-addresses:           --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered:                     unknown
connection.lldp:                        default
connection.mdns:                        -1 (default)
connection.llmnr:                       -1 (default)
connection.dns-over-tls:                -1 (default)
connection.mptcp-flags:                 0x0 (default)
connection.wait-device-timeout:         -1
connection.wait-activation-delay:       -1
802-3-ethernet.port:                    --
802-3-ethernet.speed:                   0
802-3-ethernet.duplex:                  --
802-3-ethernet.auto-negotiate:          no
802-3-ethernet.mac-address:             --
802-3-ethernet.cloned-mac-address:      --
802-3-ethernet.generate-mac-address-mask:--
802-3-ethernet.mac-address-denylist:    --
802-3-ethernet.mtu:                     auto
802-3-ethernet.s390-subchannels:        --
802-3-ethernet.s390-nettype:            --
802-3-ethernet.s390-options:            --
802-3-ethernet.wake-on-lan:             default
802-3-ethernet.wake-on-lan-password:    --
802-3-ethernet.accept-all-mac-addresses:-1 (default)
ipv4.method:                            auto
ipv4.dns:                               --
ipv4.dns-search:                        --
ipv4.dns-options:                       --
ipv4.dns-priority:                      0
ipv4.addresses:                         --
ipv4.gateway:                           --
ipv4.routes:                            --
ipv4.route-metric:                      99
ipv4.route-table:                       0 (unspec)
ipv4.routing-rules:                     --
ipv4.replace-local-rule:                -1 (default)
ipv4.dhcp-send-release:                 -1 (default)
ipv4.routed-dns:                        -1 (default)
ipv4.ignore-auto-routes:                no
ipv4.ignore-auto-dns:                   no
ipv4.dhcp-client-id:                    --
ipv4.dhcp-iaid:                         --
ipv4.dhcp-dscp:                         --
ipv4.dhcp-timeout:                      90
ipv4.dhcp-send-hostname-deprecated:     yes
ipv4.dhcp-send-hostname:                -1 (default)
ipv4.dhcp-hostname:                     --
ipv4.dhcp-fqdn:                         --
ipv4.dhcp-hostname-flags:               0x0 (none)
ipv4.never-default:                     no
ipv4.may-fail:                          no
ipv4.required-timeout:                  20000
ipv4.dad-timeout:                       -1 (default)
ipv4.dhcp-vendor-class-identifier:      anaconda-Linux
ipv4.dhcp-ipv6-only-preferred:          -1 (default)
ipv4.link-local:                        0 (default)
ipv4.dhcp-reject-servers:               --
ipv4.auto-route-ext-gw:                 -1 (default)
ipv4.shared-dhcp-range:                 --
ipv4.shared-dhcp-lease-time:            0 (default)
ipv6.method:                            auto
ipv6.dns:                               --
ipv6.dns-search:                        --
ipv6.dns-options:                       --
ipv6.dns-priority:                      0
ipv6.addresses:                         --
ipv6.gateway:                           --
ipv6.routes:                            --
ipv6.route-metric:                      99
ipv6.route-table:                       0 (unspec)
ipv6.routing-rules:                     --
ipv6.replace-local-rule:                -1 (default)
ipv6.dhcp-send-release:                 -1 (default)
ipv6.routed-dns:                        -1 (default)
ipv6.ignore-auto-routes:                no
ipv6.ignore-auto-dns:                   no
ipv6.never-default:                     no
ipv6.may-fail:                          yes
ipv6.required-timeout:                  -1 (default)
ipv6.ip6-privacy:                       -1 (default)
ipv6.temp-valid-lifetime:               0 (default)
ipv6.temp-preferred-lifetime:           0 (default)
ipv6.addr-gen-mode:                     eui64
ipv6.ra-timeout:                        0 (default)
ipv6.mtu:                               auto
ipv6.dhcp-pd-hint:                      --
ipv6.dhcp-duid:                         --
ipv6.dhcp-iaid:                         --
ipv6.dhcp-timeout:                      90
ipv6.dhcp-send-hostname-deprecated:     yes
ipv6.dhcp-send-hostname:                -1 (default)
ipv6.dhcp-hostname:                     --
ipv6.dhcp-hostname-flags:               0x0 (none)
ipv6.auto-route-ext-gw:                 -1 (default)
ipv6.token:                             --
proxy.method:                           none
proxy.browser-only:                     no
proxy.pac-url:                          --
proxy.pac-script:                       --
GENERAL.NAME:                           testeth0
GENERAL.UUID:                           8d7ebafe-f9dc-418d-af53-a5302afe9071
GENERAL.DEVICES:                        eth0
GENERAL.IP-IFACE:                       eth0
GENERAL.STATE:                          activated
GENERAL.DEFAULT:                        yes
GENERAL.DEFAULT6:                       yes
GENERAL.SPEC-OBJECT:                    --
GENERAL.VPN:                            no
GENERAL.DBUS-PATH:                      /org/freedesktop/NetworkManager/ActiveConnection/2
GENERAL.CON-PATH:                       /org/freedesktop/NetworkManager/Settings/12
GENERAL.ZONE:                           public
GENERAL.MASTER-PATH:                    --
IP4.ADDRESS[1]:                         10.43.135.17/22
IP4.GATEWAY:                            10.43.135.254
IP4.ROUTE[1]:                           dst = 10.43.132.0/22, nh = 0.0.0.0, mt = 99
IP4.ROUTE[2]:                           dst = 0.0.0.0/0, nh = 10.43.135.254, mt = 99
IP4.DNS[1]:                             10.45.248.15
IP4.DNS[2]:                             10.38.5.26
IP4.DOMAIN[1]:                          tpb.lab.eng.brq.redhat.com
IP4.DOMAIN[2]:                          lab.eng.brq.redhat.com
IP4.DOMAIN[3]:                          brq.redhat.com
IP4.DOMAIN[4]:                          redhat.com
DHCP4.OPTION[1]:                        dhcp_client_identifier = 01:52:54:00:01:19:6a
DHCP4.OPTION[2]:                        dhcp_lease_time = 86400
DHCP4.OPTION[3]:                        dhcp_server_identifier = 10.45.248.15
DHCP4.OPTION[4]:                        domain_name = tpb.lab.eng.brq.redhat.com lab.eng.brq.redhat.com brq.redhat.com redhat.com
DHCP4.OPTION[5]:                        domain_name_servers = 10.45.248.15 10.38.5.26
DHCP4.OPTION[6]:                        expiry = 1734668513
DHCP4.OPTION[7]:                        filename = pxelinux.0
DHCP4.OPTION[8]:                        host_name = wifi3-ml5-vm4.tpb.lab.eng.brq.redhat.com
DHCP4.OPTION[9]:                        ip_address = 10.43.135.17
DHCP4.OPTION[10]:                       next_server = 10.44.0.15
DHCP4.OPTION[11]:                       ntp_servers = 10.2.32.38 10.2.32.37 10.11.160.238
DHCP4.OPTION[12]:                       requested_broadcast_address = 1
DHCP4.OPTION[13]:                       requested_domain_name = 1
DHCP4.OPTION[14]:                       requested_domain_name_servers = 1
DHCP4.OPTION[15]:                       requested_domain_search = 1
DHCP4.OPTION[16]:                       requested_host_name = 1
DHCP4.OPTION[17]:                       requested_interface_mtu = 1
DHCP4.OPTION[18]:                       requested_ms_classless_static_routes = 1
DHCP4.OPTION[19]:                       requested_nis_domain = 1
DHCP4.OPTION[20]:                       requested_nis_servers = 1
DHCP4.OPTION[21]:                       requested_ntp_servers = 1
DHCP4.OPTION[22]:                       requested_rfc3442_classless_static_routes = 1
DHCP4.OPTION[23]:                       requested_root_path = 1
DHCP4.OPTION[24]:                       requested_routers = 1
DHCP4.OPTION[25]:                       requested_static_routes = 1
DHCP4.OPTION[26]:                       requested_subnet_mask = 1
DHCP4.OPTION[27]:                       requested_time_offset = 1
DHCP4.OPTION[28]:                       requested_wpad = 1
DHCP4.OPTION[29]:                       routers = 10.43.135.254
DHCP4.OPTION[30]:                       subnet_mask = 255.255.252.0
IP6.ADDRESS[1]:                         2620:52:0:2b86:5054:ff:fe01:196a/64
IP6.ADDRESS[2]:                         fe80::5054:ff:fe01:196a/64
IP6.GATEWAY:                            fe80::f6a7:3901:5e6c:5261
IP6.ROUTE[1]:                           dst = fe80::/64, nh = ::, mt = 1024
IP6.ROUTE[2]:                           dst = 2620:52:0:2b86::/64, nh = ::, mt = 99
IP6.ROUTE[3]:                           dst = ::/0, nh = fe80::f6a7:3901:5e6c:5261, mt = 99


--------------------------------------------------
(51) Command `nmcli connection delete libreswan`
['nmcli', 'connection', 'delete', 'libreswan'] returned 10 in 0.019s
STDERR:
Error: unknown connection 'libreswan'.
Error: cannot delete unknown connection(s): 'libreswan'.


--------------------------------------------------
(46) Libreswan Pluto Journal
Download
listening for IKE messages
adding interface libreswan1 11.12.13.15:UDP/500
adding interface libreswan1 11.12.13.15:UDP/4500 (NAT)
loading secrets from "/etc/ipsec.secrets"
"cc935ece-b568-4eb5-97b8-0a6960dbc955": ikev2=yes has been replaced by keyexchange=ikev2
"cc935ece-b568-4eb5-97b8-0a6960dbc955": IKE SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:IKE=AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:IKE=AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:IKE=CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:IKE=AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:IKE=AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955": Child SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:ESP=AES_GCM_16_256-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:ESP=AES_GCM_16_128-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:ESP=CHACHA20_POLY1305-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:ESP=AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:ESP=AES_CBC_128-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955": loaded private key matching left certificate 'LibreswanClient'
"cc935ece-b568-4eb5-97b8-0a6960dbc955": warning: keyingtries=1 ignored, UP connection will attempt to establish until marked DOWN
"cc935ece-b568-4eb5-97b8-0a6960dbc955": added IKEv2 connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #1: initiating IKEv2 connection to 11.12.13.14 using UDP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #1: sent IKE_SA_INIT request to 11.12.13.14:UDP/500
"roadwarrior_psk"[1] 11.12.13.15 #1: processing IKE_SA_INIT request from 11.12.13.15:UDP/500 containing SA,KE,Ni,N(IKEV2_FRAGMENTATION_SUPPORTED),N(SIGNATURE_HASH_ALGORITHMS),N(NAT_DETECTION_SOURCE_IP),N(NAT_DETECTION_DESTINATION_IP)
"roadwarrior_psk"[1] 11.12.13.15 #1: proposal 1:IKE=AES_GCM_16_256-HMAC_SHA2_512-ECP_256 chosen from remote proposals 1:IKE:ENCR=AES_GCM_16_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192[first-match] 2:IKE:ENCR=AES_GCM_16_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 3:IKE:ENCR=CHACHA20_POLY1305;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 4:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 5:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192
"roadwarrior_psk"[1] 11.12.13.15 #1: sent IKE_SA_INIT response to 11.12.13.15:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #1: processed IKE_SA_INIT response from 11.12.13.14:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}, initiating IKE_AUTH
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #1: sent IKE_AUTH request to 11.12.13.14:UDP/500
"roadwarrior_psk"[1] 11.12.13.15 #1: received IKE_AUTH request fragment 1 (1 of 6), computing DH in the background
"roadwarrior_psk"[1] 11.12.13.15 #1: processing decrypted IKE_AUTH request from 11.12.13.15:UDP/500 containing SK{IDi,CERT,IDr,AUTH,SA,CP,TSi,TSr}
adding the CA+root cert CN=RedHat,OU=Desktop QE,O=Red Hat Czech,L=Brno,ST=Jihomoravsky kraj,C=CZ
"roadwarrior_psk"[1] 11.12.13.15 #1: our certificate subjectAltName extension does not match ID_DER_ASN1_DN 'CN=libreswan_server'
"roadwarrior_psk"[1] 11.12.13.15 #1: our certificate subjectAltName extension does not match ID_DER_ASN1_DN 'CN=libreswan_server'
"roadwarrior_psk"[1] 11.12.13.15 #1: responder established IKE SA; authenticated peer certificate 'C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"roadwarrior_psk"[1] 11.12.13.15 #1: reloaded private key matching left certificate 'LibreswanServer'
"roadwarrior_psk"[1] 11.12.13.15 #2: pool 172.29.100.2-172.29.100.10: growing address pool from 0 to 1
"roadwarrior_psk"[1] 11.12.13.15 #2: proposal 1:ESP=AES_GCM_16_256-ESN:YES SPI=a1a39b82 chosen from remote proposals 1:ESP:ENCR=AES_GCM_16_256;ESN=YES;ESN=NO[first-match] 2:ESP:ENCR=AES_GCM_16_128;ESN=YES;ESN=NO 3:ESP:ENCR=CHACHA20_POLY1305;ESN=YES;ESN=NO 4:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO 5:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO
"roadwarrior_psk"[1] 11.12.13.15 #2: responder established Child SA using #1; IPsec tunnel [0.0.0.0/0===172.29.100.2/32] {ESP/ESN=>0xa1a39b82 <0xdacf9af3 xfrm=AES_GCM_16_256-NONE DPD=passive}
adding the CA+root cert CN=RedHat,OU=Desktop QE,O=Red Hat Czech,L=Brno,ST=Jihomoravsky kraj,C=CZ
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #1: initiator established IKE SA; authenticated peer certificate 'C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_server' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: received INTERNAL_IP4_ADDRESS 172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: received INTERNAL_IP4_DNS 8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678762 org.freedesktop.NetworkManager.libreswan.Connection_11
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_SA_REQID=16389
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_ID=CN=libreswan_server
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: SPI_IN=0xdacf9af3
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: SPI_OUT=0xa1a39b82
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PLUTO_VERB=prepare-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: prepare-client output: nm-libreswan-helper[678762,678794]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678762 org.freedesktop.NetworkManager.libreswan.Connection_11
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_SA_REQID=16389
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_ID=CN=libreswan_server
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_ADDTIME=1734582139
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: SPI_IN=0xdacf9af3
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: SPI_OUT=0xa1a39b82
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PLUTO_VERB=route-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: route-client output: nm-libreswan-helper[678762,678799]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678762 org.freedesktop.NetworkManager.libreswan.Connection_11
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_SA_REQID=16389
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_ID=CN=libreswan_server
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_ADDTIME=1734582139
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: SPI_IN=0xdacf9af3
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: SPI_OUT=0xa1a39b82
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PLUTO_VERB=up-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: up-client output: nm-libreswan-helper[678762,678813]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: initiator established Child SA using #1; IPsec tunnel [172.29.100.2/32===0.0.0.0/0] {ESP/ESN=>0xdacf9af3 <0xa1a39b82 xfrm=AES_GCM_16_256-NONE DPD=passive}
"cc935ece-b568-4eb5-97b8-0a6960dbc955": terminating SAs using this connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #1: deleting IKE SA (ESTABLISHED_IKE_SA) aged 0.739644s and sending notification
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678762 org.freedesktop.NetworkManager.libreswan.Connection_11
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_SA_REQID=16389
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_ID=CN=libreswan_server
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_ADDTIME=1734582139
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: SPI_IN=0xdacf9af3
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: SPI_OUT=0xa1a39b82
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PLUTO_VERB=down-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: down-client output: nm-libreswan-helper[678762,678879]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678762 org.freedesktop.NetworkManager.libreswan.Connection_11
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_SA_REQID=16389
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_ID=CN=libreswan_server
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_ADDTIME=1734582139
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: SPI_IN=0xdacf9af3
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: SPI_OUT=0xa1a39b82
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PLUTO_VERB=unroute-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: unroute-client output: nm-libreswan-helper[678762,678890]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #2: ESP traffic information: in=0B out=0B
packet from 11.12.13.14:500: INFORMATIONAL response has no corresponding IKE SA; message dropped
"roadwarrior_psk"[1] 11.12.13.15 #2: unroute-client output: RTNETLINK answers: Network is unreachable
"roadwarrior_psk"[1] 11.12.13.15 #2: ESP traffic information: in=0B out=0B
"roadwarrior_psk"[1] 11.12.13.15 #1: deleting IKE SA (established IKE SA)
"roadwarrior_psk"[1] 11.12.13.15: deleting connection instance with peer 11.12.13.15
listening for IKE messages
forgetting secrets
loading secrets from "/etc/ipsec.secrets"
"cc935ece-b568-4eb5-97b8-0a6960dbc955": ikev2=yes has been replaced by keyexchange=ikev2
"cc935ece-b568-4eb5-97b8-0a6960dbc955": IKE SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:IKE=AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:IKE=AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:IKE=CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:IKE=AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:IKE=AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955": Child SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:ESP=AES_GCM_16_256-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:ESP=AES_GCM_16_128-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:ESP=CHACHA20_POLY1305-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:ESP=AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:ESP=AES_CBC_128-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955": loaded private key matching left certificate 'LibreswanClient'
"cc935ece-b568-4eb5-97b8-0a6960dbc955": warning: keyingtries=1 ignored, UP connection will attempt to establish until marked DOWN
"cc935ece-b568-4eb5-97b8-0a6960dbc955": added IKEv2 connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #3: initiating IKEv2 connection to 11.12.13.14 using UDP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #3: sent IKE_SA_INIT request to 11.12.13.14:UDP/500
"roadwarrior_psk"[2] 11.12.13.15 #3: processing IKE_SA_INIT request from 11.12.13.15:UDP/500 containing SA,KE,Ni,N(IKEV2_FRAGMENTATION_SUPPORTED),N(SIGNATURE_HASH_ALGORITHMS),N(NAT_DETECTION_SOURCE_IP),N(NAT_DETECTION_DESTINATION_IP)
"roadwarrior_psk"[2] 11.12.13.15 #3: proposal 1:IKE=AES_GCM_16_256-HMAC_SHA2_512-ECP_256 chosen from remote proposals 1:IKE:ENCR=AES_GCM_16_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192[first-match] 2:IKE:ENCR=AES_GCM_16_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 3:IKE:ENCR=CHACHA20_POLY1305;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 4:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 5:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192
"roadwarrior_psk"[2] 11.12.13.15 #3: sent IKE_SA_INIT response to 11.12.13.15:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #3: processed IKE_SA_INIT response from 11.12.13.14:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}, initiating IKE_AUTH
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #3: sent IKE_AUTH request to 11.12.13.14:UDP/500
"roadwarrior_psk"[2] 11.12.13.15 #3: received IKE_AUTH request fragment 1 (1 of 6), computing DH in the background
"roadwarrior_psk"[2] 11.12.13.15 #3: processing decrypted IKE_AUTH request from 11.12.13.15:UDP/500 containing SK{IDi,CERT,IDr,AUTH,SA,CP,TSi,TSr}
"roadwarrior_psk"[2] 11.12.13.15 #3: our certificate subjectAltName extension does not match ID_DER_ASN1_DN 'CN=invalid_cert'
"roadwarrior_psk"[2] 11.12.13.15 #3: our certificate subjectAltName extension does not match ID_DER_ASN1_DN 'CN=invalid_cert'
"roadwarrior_psk"[2] 11.12.13.15 #3: responder established IKE SA; authenticated peer certificate 'C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"roadwarrior_psk"[2] 11.12.13.15 #4: proposal 1:ESP=AES_GCM_16_256-ESN:YES SPI=150f8f2c chosen from remote proposals 1:ESP:ENCR=AES_GCM_16_256;ESN=YES;ESN=NO[first-match] 2:ESP:ENCR=AES_GCM_16_128;ESN=YES;ESN=NO 3:ESP:ENCR=CHACHA20_POLY1305;ESN=YES;ESN=NO 4:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO 5:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO
"roadwarrior_psk"[2] 11.12.13.15 #4: responder established Child SA using #3; IPsec tunnel [0.0.0.0/0===172.29.100.2/32] {ESP/ESN=>0x150f8f2c <0xaaded3a2 xfrm=AES_GCM_16_256-NONE DPD=passive}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #3: X509: authentication failed; peer ID_DER_ASN1_DN 'CN=libreswan_server,OU=Desktop QE,O=Red Hat Czech,ST=Jihomoravsky kraj,C=CZ' does not match expected 'CN=invalid_cert'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #3: deleting IKE SA (IKE_AUTH_I) aged 0.036774s and sending notification
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: connection is supposed to remain up; revival attempt 1 scheduled in 0 seconds
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678912 org.freedesktop.NetworkManager.libreswan.Connection_12
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_SA_REQID=16392
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_ID=CN=invalid_cert
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_SA_TYPE=unknown?
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_MY_CLIENT=11.12.13.15/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: SPI_IN=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_PEER_DNS_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_MY_CLIENT_NET=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: SPI_OUT=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PLUTO_VERB=unroute-host
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #4: unroute-host output: nm-libreswan-helper[678912,678945]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
packet from 11.12.13.14:500: INFORMATIONAL response has no corresponding IKE SA; message dropped
"cc935ece-b568-4eb5-97b8-0a6960dbc955": reviving connection which delete Child SA but must remain up per local policy (serial $2)
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: initiating IKEv2 connection to 11.12.13.14 using UDP
"cc935ece-b568-4eb5-97b8-0a6960dbc955": terminating SAs using this connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678912 org.freedesktop.NetworkManager.libreswan.Connection_12
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_SA_REQID=16392
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_ID=CN=invalid_cert
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_SA_TYPE=none
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_MY_CLIENT=11.12.13.15/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: SPI_IN=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_PEER_DNS_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_MY_CLIENT_NET=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: SPI_OUT=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PLUTO_VERB=unroute-host
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: unroute-host output: nm-libreswan-helper[678912,678956]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #5: deleting IKE SA (waiting for KE to finish)
"roadwarrior_psk"[2] 11.12.13.15 #4: unroute-client output: RTNETLINK answers: Network is unreachable
"roadwarrior_psk"[2] 11.12.13.15 #4: ESP traffic information: in=0B out=0B
"roadwarrior_psk"[2] 11.12.13.15 #3: deleting IKE SA (established IKE SA)
"roadwarrior_psk"[2] 11.12.13.15: deleting connection instance with peer 11.12.13.15
listening for IKE messages
forgetting secrets
loading secrets from "/etc/ipsec.secrets"
"cc935ece-b568-4eb5-97b8-0a6960dbc955": ikev2=yes has been replaced by keyexchange=ikev2
"cc935ece-b568-4eb5-97b8-0a6960dbc955": IKE SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:IKE=AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:IKE=AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:IKE=CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:IKE=AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:IKE=AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955": Child SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:ESP=AES_GCM_16_256-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:ESP=AES_GCM_16_128-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:ESP=CHACHA20_POLY1305-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:ESP=AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:ESP=AES_CBC_128-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955": loaded private key matching left certificate 'LibreswanClient'
"cc935ece-b568-4eb5-97b8-0a6960dbc955": warning: keyingtries=1 ignored, UP connection will attempt to establish until marked DOWN
"cc935ece-b568-4eb5-97b8-0a6960dbc955": added IKEv2 connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: initiating IKEv2 connection to 11.12.13.14 using UDP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: sent IKE_SA_INIT request to 11.12.13.14:UDP/500
"roadwarrior_psk"[3] 11.12.13.15 #5: processing IKE_SA_INIT request from 11.12.13.15:UDP/500 containing SA,KE,Ni,N(IKEV2_FRAGMENTATION_SUPPORTED),N(SIGNATURE_HASH_ALGORITHMS),N(NAT_DETECTION_SOURCE_IP),N(NAT_DETECTION_DESTINATION_IP)
"roadwarrior_psk"[3] 11.12.13.15 #5: proposal 1:IKE=AES_GCM_16_256-HMAC_SHA2_512-ECP_256 chosen from remote proposals 1:IKE:ENCR=AES_GCM_16_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192[first-match] 2:IKE:ENCR=AES_GCM_16_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 3:IKE:ENCR=CHACHA20_POLY1305;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 4:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 5:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192
"roadwarrior_psk"[3] 11.12.13.15 #5: sent IKE_SA_INIT response to 11.12.13.15:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: processed IKE_SA_INIT response from 11.12.13.14:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}, initiating IKE_AUTH
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: sent IKE_AUTH request to 11.12.13.14:UDP/500
"roadwarrior_psk"[3] 11.12.13.15 #5: received IKE_AUTH request fragment 1 (1 of 6), computing DH in the background
"roadwarrior_psk"[3] 11.12.13.15 #5: processing decrypted IKE_AUTH request from 11.12.13.15:UDP/500 containing SK{IDi,CERT,IDr,AUTH,SA,CP,TSi,TSr}
"roadwarrior_psk"[3] 11.12.13.15 #5: our certificate subjectAltName extension does not match ID_DER_ASN1_DN 'CN=invalid_cert'
"roadwarrior_psk"[3] 11.12.13.15 #5: our certificate subjectAltName extension does not match ID_DER_ASN1_DN 'CN=invalid_cert'
"roadwarrior_psk"[3] 11.12.13.15 #5: responder established IKE SA; authenticated peer certificate 'C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"roadwarrior_psk"[3] 11.12.13.15 #6: proposal 1:ESP=AES_GCM_16_256-ESN:YES SPI=272f1dfb chosen from remote proposals 1:ESP:ENCR=AES_GCM_16_256;ESN=YES;ESN=NO[first-match] 2:ESP:ENCR=AES_GCM_16_128;ESN=YES;ESN=NO 3:ESP:ENCR=CHACHA20_POLY1305;ESN=YES;ESN=NO 4:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO 5:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO
"roadwarrior_psk"[3] 11.12.13.15 #6: responder established Child SA using #5; IPsec tunnel [0.0.0.0/0===172.29.100.2/32] {ESP/ESN=>0x272f1dfb <0x1e36fa91 xfrm=AES_GCM_16_256-NONE DPD=passive}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: peer ID_DER_ASN1_DN 'CN=libreswan_server,OU=Desktop QE,O=Red Hat Czech,ST=Jihomoravsky kraj,C=CZ' does not match expected 'CN=invalid_cert'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: X509: connection allows unmatched IKE ID and certificate SAN
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: authentication failed: no certificate matched RSASSA-PSS with SHA2_512 and 'CN=invalid_cert'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #6: deleting IKE SA (IKE_AUTH_I) aged 0.040191s and sending notification
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: connection is supposed to remain up; revival attempt 1 scheduled in 0 seconds
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 678991 org.freedesktop.NetworkManager.libreswan.Connection_13
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+ALLOW_NO_SAN+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_SA_REQID=16396
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_ID=CN=invalid_cert
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_SA_TYPE=unknown?
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_MY_CLIENT=11.12.13.15/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: SPI_IN=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_PEER_DNS_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_MY_CLIENT_NET=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: SPI_OUT=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PLUTO_VERB=unroute-host
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #7: unroute-host output: nm-libreswan-helper[678991,679024]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
packet from 11.12.13.14:500: INFORMATIONAL response has no corresponding IKE SA; message dropped
"roadwarrior_psk"[3] 11.12.13.15 #6: unroute-client output: RTNETLINK answers: Network is unreachable
"roadwarrior_psk"[3] 11.12.13.15 #6: ESP traffic information: in=0B out=0B
"roadwarrior_psk"[3] 11.12.13.15 #5: deleting IKE SA (established IKE SA)
"roadwarrior_psk"[3] 11.12.13.15: deleting connection instance with peer 11.12.13.15
listening for IKE messages
forgetting secrets
loading secrets from "/etc/ipsec.secrets"
"cc935ece-b568-4eb5-97b8-0a6960dbc955": ikev2=yes has been replaced by keyexchange=ikev2
"cc935ece-b568-4eb5-97b8-0a6960dbc955": IKE SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:IKE=AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:IKE=AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:IKE=CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:IKE=AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:IKE=AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955": Child SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:ESP=AES_GCM_16_256-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:ESP=AES_GCM_16_128-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:ESP=CHACHA20_POLY1305-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:ESP=AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:ESP=AES_CBC_128-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955": loaded private key matching left certificate 'LibreswanClient'
"cc935ece-b568-4eb5-97b8-0a6960dbc955": warning: keyingtries=1 ignored, UP connection will attempt to establish until marked DOWN
"cc935ece-b568-4eb5-97b8-0a6960dbc955": added IKEv2 connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #8: initiating IKEv2 connection to 11.12.13.14 using UDP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #8: sent IKE_SA_INIT request to 11.12.13.14:UDP/500
"roadwarrior_psk"[4] 11.12.13.15 #7: processing IKE_SA_INIT request from 11.12.13.15:UDP/500 containing SA,KE,Ni,N(IKEV2_FRAGMENTATION_SUPPORTED),N(SIGNATURE_HASH_ALGORITHMS),N(NAT_DETECTION_SOURCE_IP),N(NAT_DETECTION_DESTINATION_IP)
"roadwarrior_psk"[4] 11.12.13.15 #7: proposal 1:IKE=AES_GCM_16_256-HMAC_SHA2_512-ECP_256 chosen from remote proposals 1:IKE:ENCR=AES_GCM_16_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192[first-match] 2:IKE:ENCR=AES_GCM_16_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 3:IKE:ENCR=CHACHA20_POLY1305;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 4:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 5:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192
"roadwarrior_psk"[4] 11.12.13.15 #7: sent IKE_SA_INIT response to 11.12.13.15:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #8: processed IKE_SA_INIT response from 11.12.13.14:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}, initiating IKE_AUTH
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #8: sent IKE_AUTH request to 11.12.13.14:UDP/500
"roadwarrior_psk"[4] 11.12.13.15 #7: received IKE_AUTH request fragment 1 (1 of 6), computing DH in the background
"roadwarrior_psk"[4] 11.12.13.15 #7: processing decrypted IKE_AUTH request from 11.12.13.15:UDP/500 containing SK{IDi,CERT,IDr,AUTH,SA,CP,TSi,TSr}
"roadwarrior_psk"[4] 11.12.13.15 #7: our certificate subjectAltName extension does not match ID_FQDN 'invalid_id'
"roadwarrior_psk"[4] 11.12.13.15 #7: our certificate subjectAltName extension does not match ID_FQDN 'invalid_id'
"roadwarrior_psk"[4] 11.12.13.15 #7: responder established IKE SA; authenticated peer certificate 'C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"roadwarrior_psk"[4] 11.12.13.15 #8: proposal 1:ESP=AES_GCM_16_256-ESN:YES SPI=49388f75 chosen from remote proposals 1:ESP:ENCR=AES_GCM_16_256;ESN=YES;ESN=NO[first-match] 2:ESP:ENCR=AES_GCM_16_128;ESN=YES;ESN=NO 3:ESP:ENCR=CHACHA20_POLY1305;ESN=YES;ESN=NO 4:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO 5:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO
"roadwarrior_psk"[4] 11.12.13.15 #8: responder established Child SA using #7; IPsec tunnel [0.0.0.0/0===172.29.100.2/32] {ESP/ESN=>0x49388f75 <0xde2bf699 xfrm=AES_GCM_16_256-NONE DPD=passive}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #8: X509: authentication failed; peer certificate subjectAltName extension does not match ID_FQDN 'invalid_id'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #8: deleting IKE SA (IKE_AUTH_I) aged 0.037229s and sending notification
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: connection is supposed to remain up; revival attempt 1 scheduled in 0 seconds
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679066 org.freedesktop.NetworkManager.libreswan.Connection_14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_SA_REQID=16400
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_SA_TYPE=unknown?
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_MY_CLIENT=11.12.13.15/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: SPI_IN=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_PEER_DNS_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_MY_CLIENT_NET=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: SPI_OUT=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PLUTO_VERB=unroute-host
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #9: unroute-host output: nm-libreswan-helper[679066,679099]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
packet from 11.12.13.14:500: INFORMATIONAL response has no corresponding IKE SA; message dropped
"cc935ece-b568-4eb5-97b8-0a6960dbc955": reviving connection which delete Child SA but must remain up per local policy (serial $4)
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: initiating IKEv2 connection to 11.12.13.14 using UDP
"cc935ece-b568-4eb5-97b8-0a6960dbc955": terminating SAs using this connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679066 org.freedesktop.NetworkManager.libreswan.Connection_14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_SA_REQID=16400
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_SA_TYPE=none
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_MY_CLIENT=11.12.13.15/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: SPI_IN=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_PEER_DNS_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_MY_CLIENT_NET=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: SPI_OUT=0x0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PLUTO_VERB=unroute-host
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: unroute-host output: nm-libreswan-helper[679066,679111]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #10: deleting IKE SA (waiting for KE to finish)
"roadwarrior_psk"[4] 11.12.13.15 #8: unroute-client output: RTNETLINK answers: Network is unreachable
"roadwarrior_psk"[4] 11.12.13.15 #8: ESP traffic information: in=0B out=0B
"roadwarrior_psk"[4] 11.12.13.15 #7: deleting IKE SA (established IKE SA)
"roadwarrior_psk"[4] 11.12.13.15: deleting connection instance with peer 11.12.13.15
listening for IKE messages
forgetting secrets
loading secrets from "/etc/ipsec.secrets"
"cc935ece-b568-4eb5-97b8-0a6960dbc955": ikev2=yes has been replaced by keyexchange=ikev2
"cc935ece-b568-4eb5-97b8-0a6960dbc955": IKE SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:IKE=AES_GCM_16_256-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:IKE=AES_GCM_16_128-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:IKE=CHACHA20_POLY1305-HMAC_SHA2_512+HMAC_SHA2_256-NONE-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:IKE=AES_CBC_256-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:IKE=AES_CBC_128-HMAC_SHA2_512+HMAC_SHA2_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-ECP_256+ECP_384+ECP_521+CURVE25519+MODP4096+MODP3072+MODP2048+MODP8192
"cc935ece-b568-4eb5-97b8-0a6960dbc955": Child SA proposals (connection add):
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   1:ESP=AES_GCM_16_256-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   2:ESP=AES_GCM_16_128-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   3:ESP=CHACHA20_POLY1305-NONE-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   4:ESP=AES_CBC_256-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955":   5:ESP=AES_CBC_128-HMAC_SHA2_512_256+HMAC_SHA2_256_128-NONE-ESN:YES+NO
"cc935ece-b568-4eb5-97b8-0a6960dbc955": loaded private key matching left certificate 'LibreswanClient'
"cc935ece-b568-4eb5-97b8-0a6960dbc955": warning: keyingtries=1 ignored, UP connection will attempt to establish until marked DOWN
"cc935ece-b568-4eb5-97b8-0a6960dbc955": added IKEv2 connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: initiating IKEv2 connection to 11.12.13.14 using UDP
"roadwarrior_psk"[5] 11.12.13.15 #9: processing IKE_SA_INIT request from 11.12.13.15:UDP/500 containing SA,KE,Ni,N(IKEV2_FRAGMENTATION_SUPPORTED),N(SIGNATURE_HASH_ALGORITHMS),N(NAT_DETECTION_SOURCE_IP),N(NAT_DETECTION_DESTINATION_IP)
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: sent IKE_SA_INIT request to 11.12.13.14:UDP/500
"roadwarrior_psk"[5] 11.12.13.15 #9: proposal 1:IKE=AES_GCM_16_256-HMAC_SHA2_512-ECP_256 chosen from remote proposals 1:IKE:ENCR=AES_GCM_16_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192[first-match] 2:IKE:ENCR=AES_GCM_16_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 3:IKE:ENCR=CHACHA20_POLY1305;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 4:IKE:ENCR=AES_CBC_256;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192 5:IKE:ENCR=AES_CBC_128;PRF=HMAC_SHA2_512;PRF=HMAC_SHA2_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;DH=ECP_256;DH=ECP_384;DH=ECP_521;DH=CURVE25519;DH=MODP4096;DH=MODP3072;DH=MODP2048;DH=MODP8192
"roadwarrior_psk"[5] 11.12.13.15 #9: sent IKE_SA_INIT response to 11.12.13.15:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: processed IKE_SA_INIT response from 11.12.13.14:UDP/500 {cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=DH19}, initiating IKE_AUTH
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: sent IKE_AUTH request to 11.12.13.14:UDP/500
"roadwarrior_psk"[5] 11.12.13.15 #9: received IKE_AUTH request fragment 1 (1 of 6), computing DH in the background
"roadwarrior_psk"[5] 11.12.13.15 #9: processing decrypted IKE_AUTH request from 11.12.13.15:UDP/500 containing SK{IDi,CERT,IDr,AUTH,SA,CP,TSi,TSr}
"roadwarrior_psk"[5] 11.12.13.15 #9: our certificate subjectAltName extension does not match ID_FQDN 'invalid_id'
"roadwarrior_psk"[5] 11.12.13.15 #9: our certificate subjectAltName extension does not match ID_FQDN 'invalid_id'
"roadwarrior_psk"[5] 11.12.13.15 #9: responder established IKE SA; authenticated peer certificate 'C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"roadwarrior_psk"[5] 11.12.13.15 #10: proposal 1:ESP=AES_GCM_16_256-ESN:YES SPI=c3ec8f13 chosen from remote proposals 1:ESP:ENCR=AES_GCM_16_256;ESN=YES;ESN=NO[first-match] 2:ESP:ENCR=AES_GCM_16_128;ESN=YES;ESN=NO 3:ESP:ENCR=CHACHA20_POLY1305;ESN=YES;ESN=NO 4:ESP:ENCR=AES_CBC_256;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO 5:ESP:ENCR=AES_CBC_128;INTEG=HMAC_SHA2_512_256;INTEG=HMAC_SHA2_256_128;ESN=YES;ESN=NO
"roadwarrior_psk"[5] 11.12.13.15 #10: responder established Child SA using #9; IPsec tunnel [0.0.0.0/0===172.29.100.2/32] {ESP/ESN=>0xc3ec8f13 <0x2c2e23af xfrm=AES_GCM_16_256-NONE DPD=passive}
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: peer certificate subjectAltName extension does not match ID_FQDN 'invalid_id'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: X509: connection allows unmatched IKE ID and certificate SAN
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: initiator established IKE SA; authenticated peer certificate '@invalid_id' and 4096-bit RSASSA-PSS with SHA2_512 digital signature issued by 'C=CZ, ST=Jihomoravsky kraj, L=Brno, O=Red Hat Czech, OU=Desktop QE, CN=RedHat'
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: received INTERNAL_IP4_ADDRESS 172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: received INTERNAL_IP4_DNS 8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679145 org.freedesktop.NetworkManager.libreswan.Connection_15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+ALLOW_NO_SAN+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_SA_REQID=16405
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_ADDTIME=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: SPI_IN=0x2c2e23af
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: SPI_OUT=0xc3ec8f13
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PLUTO_VERB=prepare-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: prepare-client output: nm-libreswan-helper[679145,679177]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679145 org.freedesktop.NetworkManager.libreswan.Connection_15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+ALLOW_NO_SAN+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_SA_REQID=16405
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_ADDTIME=1734582140
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: SPI_IN=0x2c2e23af
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: SPI_OUT=0xc3ec8f13
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PLUTO_VERB=route-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: route-client output: nm-libreswan-helper[679145,679182]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679145 org.freedesktop.NetworkManager.libreswan.Connection_15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+ALLOW_NO_SAN+UP+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_SA_REQID=16405
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_ADDTIME=1734582140
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: SPI_IN=0x2c2e23af
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: SPI_OUT=0xc3ec8f13
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PLUTO_VERB=up-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: up-client output: nm-libreswan-helper[679145,679187]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: initiator established Child SA using #11; IPsec tunnel [172.29.100.2/32===0.0.0.0/0] {ESP/ESN=>0x2c2e23af <0xc3ec8f13 xfrm=AES_GCM_16_256-NONE DPD=passive}
"cc935ece-b568-4eb5-97b8-0a6960dbc955": terminating SAs using this connection
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #11: deleting IKE SA (ESTABLISHED_IKE_SA) aged 0.12176s and sending notification
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679145 org.freedesktop.NetworkManager.libreswan.Connection_15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+ALLOW_NO_SAN+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_SA_REQID=16405
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_ADDTIME=1734582140
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: SPI_IN=0x2c2e23af
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: SPI_OUT=0xc3ec8f13
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PLUTO_VERB=down-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: down-client output: nm-libreswan-helper[679145,679234]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> command line: /usr/libexec/nm-libreswan-service-helper 7 679145 org.freedesktop.NetworkManager.libreswan.Connection_15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_NM_CONFIGURED=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_OUTBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_CLIENT=0.0.0.0/0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: XAUTH_FAILED=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CFG_SERVER=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_INTERFACE=libreswan1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_DOMAIN_INFO=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: VTI_ROUTING=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_CA=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CONN_POLICY=IKEv2+RSASIG+ECDSA+RSASIG_v1_5+ENCRYPT+TUNNEL+PFS+ALLOW_NO_SAN+MODECFG_PULL+IKE_FRAG_ALLOW+ESN_NO+ESN_YES
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CONNECTION=cc935ece-b568-4eb5-97b8-0a6960dbc955
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_STACK=xfrm
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_SA_REQID=16405
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_NEXT_HOP=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_ID=@invalid_id
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CONN_ADDRFAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_INBYTES=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_ADDTIME=1734582140
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_SA_TYPE=ESP
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CLIENT_FAMILY=ipv4
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_CLIENT=172.29.100.2/32
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_BANNER=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_PROTOCOL=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MOBIKE_EVENT=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: VTI_SHARED=no
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_ME=11.12.13.15
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CONN_KIND=CK_PERMANENT
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_XFRMI_ROUTE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_ID=C=CZ, ST=Jihomoravsky kraj, O=Red Hat Czech, OU=Desktop QE, CN=libreswan_client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_PORT=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_VIRT_INTERFACE=NULL
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_SOURCEIP=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CFG_CLIENT=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER=11.12.13.14
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: SPI_IN=0x2c2e23af
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_PEER_DNS_INFO=8.8.8.8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_CONNECTION_TYPE=tunnel
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_MY_CLIENT_NET=172.29.100.2
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: VTI_IFACE=
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_IS_PEER_CISCO=0
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: SPI_OUT=0xc3ec8f13
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PLUTO_VERB=unroute-client
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: WATCHDOG_USEC=200000000
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PWD=/run/pluto
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: SYSTEMD_EXEC_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: LANG=en_US.UTF-8
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: INVOCATION_ID=f3e9dec09bd2473595740b754db2e1bc
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: USER=root
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: WATCHDOG_PID=678658
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: NOTIFY_SOCKET=/run/systemd/notify
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: SHLVL=1
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: JOURNAL_STREAM=9:2398309
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: unroute-client output: nm-libreswan-helper[679145,679243]: <debug> environment: _=/usr/libexec/nm-libreswan-service-helper
"roadwarrior_psk"[5] 11.12.13.15 #10: unroute-client output: RTNETLINK answers: Network is unreachable
"cc935ece-b568-4eb5-97b8-0a6960dbc955" #12: ESP traffic information: in=0B out=0B
packet from 11.12.13.14:500: INFORMATIONAL response has no corresponding IKE SA; message dropped
"roadwarrior_psk"[5] 11.12.13.15 #10: ESP traffic information: in=0B out=0B
"roadwarrior_psk"[5] 11.12.13.15 #9: deleting IKE SA (established IKE SA)
"roadwarrior_psk"[5] 11.12.13.15: deleting connection instance with peer 11.12.13.15
Pluto is shutting down
freeing root certificate cache
forgetting secrets
shutting down interface lo [::1]:4500
shutting down interface lo [::1]:500
shutting down interface lo 127.0.0.1:4500
shutting down interface lo 127.0.0.1:500
shutting down interface libreswan0 11.12.13.14:4500
shutting down interface libreswan0 11.12.13.14:500
(47) Libreswan Config
Download
conn roadwarrior_psk
    auto=add
    pfs=no
    rekey=no
    left=11.12.13.14
    leftsubnet=0.0.0.0/0
    rightaddresspool=172.29.100.2-172.29.100.10
    right=%any
    leftxauthserver=yes
    rightxauthclient=yes
    leftmodecfgserver=yes
    rightmodecfgclient=yes
    modecfgpull=yes
    modecfgdns=8.8.8.8
    modecfgbanner=BUG_REPORT_URL
    fragmentation=yes
    cisco-unity=yes
    ikev2=insist
    leftcert=LibreswanServer
    leftsendcert=always
    leftid=11.12.13.14
    leftrsasigkey=%cert
    rightca=%same
    rightid=%fromcert
    rightrsasigkey=%cert
Commands
Download
(53) FAF
(54) write /tmp/pause_faf_reporting
Download
NO DATA
(59) Misc
Download
--------------------------------------------------
(59) Command `journalctl --all --no-pager '--cursor=s=093742d556364291aa2d2129c128c1ed;i=8af374;b=6de80ed4692d47f5a00a1342ea3976be;m=33f4af67c;t=62997e0266ab0;x=ef8779a8b4f27988' SYSLOG_IDENTIFIER=runtest -o cat`
['journalctl', '--all', '--no-pager', '--cursor=s=093742d556364291aa2d2129c128c1ed;i=8af374;b=6de80ed4692d47f5a00a1342ea3976be;m=33f4af67c;t=62997e0266ab0;x=ef8779a8b4f27988', 'SYSLOG_IDENTIFIER=runtest', '-o', 'cat'] returned 0 in 0.008s
STDOUT:
[NO_EMBED]

--------------------------------------------------
(56) NM
Download HTMLDownload Plaintext
(57) CRASHED_STEP_NAME
Download
PID change not detected, but coredump reported.
(58) Status After Clean
Download HTMLDownload Plaintext


date '+%Y%m%d-%H%M%S.%N (%s)'

20241219-052321.084051933 (1734582201)



get_rhel_compose

RHEL-10.0-20241217.0



NetworkManager --version

1.51.4-33630.copr.460f0b4bc9.el10



hostnamectl 2>&1

 Static hostname: wifi3-ml5-vm4.tpb.lab.eng.brq.redhat.com
       Icon name: computer-vm
         Chassis: vm 🖴
      Machine ID: f9beeda7ec9f42e7bc31f4c56291b529
         Boot ID: 6de80ed4692d47f5a00a1342ea3976be
    Product UUID: aaf12523-4988-47c0-b4ac-f867deeb5a3d
  Virtualization: kvm
Operating System: Red Hat Enterprise Linux 10.0 (Coughlan)
     CPE OS Name: cpe:/o:redhat:enterprise_linux:10::baseos
          Kernel: Linux 6.12.0-35.el10.x86_64
    Architecture: x86-64
 Hardware Vendor: Red Hat
  Hardware Model: KVM
Firmware Version: 1.16.1-1.el9
   Firmware Date: Tue 2014-04-01
    Firmware Age: 10y 8month 2w 5d



ls -lZ /etc/NetworkManager/system-connections/

total 44
-rw------- 1 root root ? 475 Dec 19 05:17 testeth0.nmconnection
-rw------- 1 root root ? 204 Dec 19 05:06 testeth10.nmconnection
-rw------- 1 root root ? 223 Dec 19 05:15 testeth1.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth2.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth3.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth4.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth5.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth6.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth7.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth8.nmconnection
-rw------- 1 root root ? 202 Dec 19 05:06 testeth9.nmconnection



ls -lZ /etc/sysconfig/network-scripts/




ls -lZ /tmp/testeth0

-rw------- 1 root root ? 463 Dec 19 01:36 /tmp/testeth0



NetworkManager --print-config

# NetworkManager configuration: /etc/NetworkManager/NetworkManager.conf, /usr/lib/NetworkManager/conf.d/00-server.conf, /etc/NetworkManager/conf.d/{94-nmci-unmanage-orig.conf,95-nmci-test.conf}

[main]
# plugins=
# rc-manager=auto
# migrate-ifcfg-rh=false
# auth-polkit=true
# dhcp=internal
# iwd-config-path=
no-auto-default=*
ignore-carrier=*
debug=RLIMIT_CORE,fatal-warnings
configure-and-quit=no

[keyfile]
unmanaged-devices=interface-name:orig-*

[logging]
# backend=journal
# audit=false
level=TRACE
domains=ALL

[device]
# wifi.backend=wpa_supplicant

# no-auto-default file "/var/lib/NetworkManager/no-auto-default.state"



nmcli -f ALL g

RUNNING  VERSION  STATE      STARTUP  CONNECTIVITY  NETWORKING  WIFI-HW  WIFI     WWAN-HW  WWAN     METERED      
running  1.51.4   connected  started  full          enabled     missing  enabled  missing  enabled  no (guessed) 



nmcli -f ALL d

DEVICE  TYPE      STATE                   IP4-CONNECTIVITY  IP6-CONNECTIVITY  DBUS-PATH                                   CONNECTION  CON-UUID                              CON-PATH                                           
eth0    ethernet  connected               full              full              /org/freedesktop/NetworkManager/Devices/2   testeth0    8d7ebafe-f9dc-418d-af53-a5302afe9071  /org/freedesktop/NetworkManager/ActiveConnection/2 
lo      loopback  connected (externally)  limited           limited           /org/freedesktop/NetworkManager/Devices/1   lo          6966c9ec-bd39-44d2-8487-890a43e02eab  /org/freedesktop/NetworkManager/ActiveConnection/1 
eth1    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/3   --          --                                    --                                                 
eth10   ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/4   --          --                                    --                                                 
eth2    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/5   --          --                                    --                                                 
eth3    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/6   --          --                                    --                                                 
eth4    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/7   --          --                                    --                                                 
eth5    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/8   --          --                                    --                                                 
eth6    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/9   --          --                                    --                                                 
eth7    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/10  --          --                                    --                                                 
eth8    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/11  --          --                                    --                                                 
eth9    ethernet  disconnected            none              none              /org/freedesktop/NetworkManager/Devices/12  --          --                                    --                                                 



nmcli -f ALL c

NAME       UUID                                  TYPE      TIMESTAMP   TIMESTAMP-REAL                   AUTOCONNECT  AUTOCONNECT-PRIORITY  READONLY  DBUS-PATH                                    ACTIVE  DEVICE  STATE      ACTIVE-PATH                                         SLAVE  FILENAME                                                      
testeth0   8d7ebafe-f9dc-418d-af53-a5302afe9071  ethernet  1734582113  Thu 19 Dec 2024 05:21:53 AM CET  yes          -100                  no        /org/freedesktop/NetworkManager/Settings/12  yes     eth0    activated  /org/freedesktop/NetworkManager/ActiveConnection/2  --     /etc/NetworkManager/system-connections/testeth0.nmconnection  
lo         6966c9ec-bd39-44d2-8487-890a43e02eab  loopback  1734582113  Thu 19 Dec 2024 05:21:53 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/1   yes     lo      activated  /org/freedesktop/NetworkManager/ActiveConnection/1  --     /run/NetworkManager/system-connections/lo.nmconnection        
testeth1   334ed2cb-0673-46b6-9ece-6aa62862b934  ethernet  1734582043  Thu 19 Dec 2024 05:20:43 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/2   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth1.nmconnection  
testeth10  b7572f02-95a3-43f8-891d-d2c50a07e484  ethernet  1734581314  Thu 19 Dec 2024 05:08:34 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/11  no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth10.nmconnection 
testeth2   3f7a1d49-ac40-4061-8a28-26583c331343  ethernet  1734581961  Thu 19 Dec 2024 05:19:21 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/3   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth2.nmconnection  
testeth3   174d0a56-8ae9-4675-b528-22c25a4af9b1  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/4   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth3.nmconnection  
testeth4   3f452f3d-dea4-4ebb-9a4a-e5f169dab687  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/5   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth4.nmconnection  
testeth5   e49422b3-64ca-415b-9ceb-57f3c78cf694  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/6   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth5.nmconnection  
testeth6   be71cb95-52ee-47e4-b618-f7159d2c9945  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/7   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth6.nmconnection  
testeth7   e26fd81a-19d9-4030-b7ab-a6a1716db7e8  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/8   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth7.nmconnection  
testeth8   93068d40-d865-48ab-9eca-64497fdd15ce  ethernet  1734581261  Thu 19 Dec 2024 05:07:41 AM CET  no           0                     no        /org/freedesktop/NetworkManager/Settings/9   no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth8.nmconnection  
testeth9   83ab2657-fd08-4c34-8415-0a8213c82bc1  ethernet  0           never                            no           0                     no        /org/freedesktop/NetworkManager/Settings/10  no      --      --         --                                                  --     /etc/NetworkManager/system-connections/testeth9.nmconnection  



nmcli -f ALL d w l




cat /etc/resolv.conf

# Generated by NetworkManager
search tpb.lab.eng.brq.redhat.com lab.eng.brq.redhat.com brq.redhat.com redhat.com
nameserver 10.45.248.15
nameserver 10.38.5.26



ip addr

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host proto kernel_lo 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:01:19:6a brd ff:ff:ff:ff:ff:ff
    altname enp1s0
    inet 10.43.135.17/22 brd 10.43.135.255 scope global dynamic noprefixroute eth0
       valid_lft 86313sec preferred_lft 86313sec
    inet6 2620:52:0:2b86:5054:ff:fe01:196a/64 scope global dynamic noprefixroute 
       valid_lft 2591992sec preferred_lft 604792sec
    inet6 fe80::5054:ff:fe01:196a/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
5: eth1@if4: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether f0:11:22:33:44:55 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
7: eth2@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 46:67:e3:24:40:46 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
9: eth3@if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 52:a8:01:35:1a:45 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
11: eth4@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default qlen 1000
    link/ether 7e:14:f3:30:08:22 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
13: eth5@if12: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether ea:b8:83:fc:51:13 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
15: eth6@if14: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether b6:47:22:fa:63:42 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
17: eth7@if16: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether f2:3c:a2:d7:e5:f3 brd ff:ff:ff:ff:ff:ff link-netns vethsetup
19: eth8@if18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1400 qdisc noqueue state UP group default qlen 1000
    link/ether 32:4b:6d:dd:e3:1a brd ff:ff:ff:ff:ff:ff link-netns vethsetup
21: eth9@if20: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether ba:be:3d:5f:e3:2b brd ff:ff:ff:ff:ff:ff link-netns vethsetup
23: eth10@if22: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether aa:89:33:26:8a:c2 brd ff:ff:ff:ff:ff:ff link-netns vethsetup



ip -4 route

default via 10.43.135.254 dev eth0 proto dhcp src 10.43.135.17 metric 99 
10.43.132.0/22 dev eth0 proto kernel scope link src 10.43.135.17 metric 99 



ip -6 route

2620:52:0:2b86::/64 dev eth0 proto ra metric 99 pref medium
fe80::/64 dev eth0 proto kernel metric 1024 pref medium
default via fe80::f6a7:3901:5e6c:5261 dev eth0 proto ra metric 99 pref medium



Veth setup network namespace and DHCP server state:



ip -n vethsetup addr

1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: inbr: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 06:9d:64:ea:bb:e6 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::49d:64ff:feea:bbe6/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
3: masqp@masq: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether 9e:e5:4a:37:f3:88 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::9ce5:4aff:fe37:f388/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
4: eth1p@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether aa:0f:89:88:e7:3f brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::a80f:89ff:fe88:e73f/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
5: masq@masqp: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 02:5e:e6:e6:13:59 brd ff:ff:ff:ff:ff:ff
    inet 192.168.100.1/24 scope global masq
       valid_lft forever preferred_lft forever
    inet6 fe80::5e:e6ff:fee6:1359/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
6: eth2p@if7: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether 06:9d:64:ea:bb:e6 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::49d:64ff:feea:bbe6/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
7: simbr: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether fe:cb:29:cf:d4:a2 brd ff:ff:ff:ff:ff:ff
    inet 10.16.1.1/24 scope global simbr
       valid_lft forever preferred_lft forever
    inet6 2620:52:0:1086:fccb:29ff:fecf:d4a2/64 scope global dynamic mngtmpaddr proto kernel_ra 
       valid_lft 1491sec preferred_lft 1491sec
    inet6 2620:52:0:1086::1/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::fccb:29ff:fecf:d4a2/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
8: eth3p@if9: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether c6:40:26:8b:7b:5b brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::c440:26ff:fe8b:7b5b/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
10: eth4p@if11: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether c2:6e:78:81:ad:e8 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::c06e:78ff:fe81:ade8/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
12: eth5p@if13: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether f6:aa:c9:3a:24:fd brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::f4aa:c9ff:fe3a:24fd/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
14: eth6p@if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether a6:db:60:fc:59:58 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::a4db:60ff:fefc:5958/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
16: eth7p@if17: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether 3e:e9:7a:3d:b6:03 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::3ce9:7aff:fe3d:b603/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
18: eth8p@if19: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether de:de:87:27:a1:0f brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::dcde:87ff:fe27:a10f/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
20: eth9p@if21: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master inbr state UP group default qlen 1000
    link/ether b2:32:c4:c3:34:5d brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::b032:c4ff:fec3:345d/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
22: eth10p@if23: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master simbr state UP group default qlen 1000
    link/ether fe:cb:29:cf:d4:a2 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::fccb:29ff:fecf:d4a2/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever



ip -n vethsetup -4 route

10.16.1.0/24 dev simbr proto kernel scope link src 10.16.1.1 
192.168.100.0/24 dev masq proto kernel scope link src 192.168.100.1 



ip -n vethsetup -6 route

2620:52:0:1086::/64 dev simbr proto kernel metric 256 pref medium
fe80::/64 dev eth1p proto kernel metric 256 pref medium
fe80::/64 dev eth2p proto kernel metric 256 pref medium
fe80::/64 dev eth3p proto kernel metric 256 pref medium
fe80::/64 dev eth4p proto kernel metric 256 pref medium
fe80::/64 dev eth5p proto kernel metric 256 pref medium
fe80::/64 dev eth6p proto kernel metric 256 pref medium
fe80::/64 dev eth7p proto kernel metric 256 pref medium
fe80::/64 dev eth8p proto kernel metric 256 pref medium
fe80::/64 dev eth9p proto kernel metric 256 pref medium
fe80::/64 dev masq proto kernel metric 256 pref medium
fe80::/64 dev masqp proto kernel metric 256 pref medium
fe80::/64 dev eth10p proto kernel metric 256 pref medium
fe80::/64 dev inbr proto kernel metric 256 pref medium
fe80::/64 dev simbr proto kernel metric 256 pref medium



ip netns exec vethsetup nft list ruleset




ps aux

USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  1.2  0.1  29160 19740 ?        Ss   01:29   2:56 /usr/lib/systemd/systemd --system --deserialize=54
root           2  0.0  0.0      0     0 ?        S    01:29   0:00 [kthreadd]
root           3  0.0  0.0      0     0 ?        S    01:29   0:00 [pool_workqueue_release]
root           4  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-rcu_gp]
root           5  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-sync_wq]
root           6  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-slub_flushwq]
root           7  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-netns]
root           9  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/0:0H-events_highpri]
root          12  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-mm_percpu_wq]
root          14  0.0  0.0      0     0 ?        I    01:29   0:00 [rcu_tasks_kthread]
root          15  0.0  0.0      0     0 ?        I    01:29   0:00 [rcu_tasks_rude_kthread]
root          16  0.0  0.0      0     0 ?        I    01:29   0:00 [rcu_tasks_trace_kthread]
root          17  0.0  0.0      0     0 ?        R    01:29   0:02 [ksoftirqd/0]
root          18  0.0  0.0      0     0 ?        I    01:29   0:02 [rcu_preempt]
root          19  0.0  0.0      0     0 ?        S    01:29   0:00 [rcu_exp_par_gp_kthread_worker/0]
root          20  0.0  0.0      0     0 ?        S    01:29   0:00 [rcu_exp_gp_kthread_worker]
root          21  0.0  0.0      0     0 ?        S    01:29   0:00 [migration/0]
root          22  0.0  0.0      0     0 ?        S    01:29   0:00 [idle_inject/0]
root          23  0.0  0.0      0     0 ?        S    01:29   0:00 [cpuhp/0]
root          24  0.0  0.0      0     0 ?        S    01:29   0:00 [cpuhp/1]
root          25  0.0  0.0      0     0 ?        S    01:29   0:00 [idle_inject/1]
root          26  0.0  0.0      0     0 ?        S    01:29   0:00 [migration/1]
root          27  0.0  0.0      0     0 ?        S    01:29   0:02 [ksoftirqd/1]
root          29  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/1:0H-events_highpri]
root          30  0.0  0.0      0     0 ?        S    01:29   0:00 [cpuhp/2]
root          31  0.0  0.0      0     0 ?        S    01:29   0:00 [idle_inject/2]
root          32  0.0  0.0      0     0 ?        S    01:29   0:00 [migration/2]
root          33  0.0  0.0      0     0 ?        S    01:29   0:02 [ksoftirqd/2]
root          35  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/2:0H-events_highpri]
root          42  0.0  0.0      0     0 ?        S    01:29   0:00 [kdevtmpfs]
root          43  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-inet_frag_wq]
root          44  0.0  0.0      0     0 ?        S    01:29   0:00 [kauditd]
root          46  0.0  0.0      0     0 ?        S    01:29   0:00 [khungtaskd]
root          47  0.0  0.0      0     0 ?        S    01:29   0:00 [oom_reaper]
root          48  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-writeback]
root          49  0.0  0.0      0     0 ?        S    01:29   0:01 [kcompactd0]
root          50  0.0  0.0      0     0 ?        SN   01:29   0:00 [ksmd]
root          51  0.0  0.0      0     0 ?        SN   01:29   0:01 [khugepaged]
root          52  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-cryptd]
root          53  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kintegrityd]
root          54  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kblockd]
root          55  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/9-acpi]
root          57  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-tpm_dev_wq]
root          58  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-md]
root          59  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-md_bitmap]
root          60  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-edac-poller]
root          61  0.0  0.0      0     0 ?        S    01:29   0:00 [watchdogd]
root          64  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/2:1H-kblockd]
root          65  0.0  0.0      0     0 ?        S    01:29   0:01 [kswapd0]
root          73  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kthrotld]
root          78  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/24-aerdrv]
root          79  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/25-aerdrv]
root          80  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/26-aerdrv]
root          81  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/27-aerdrv]
root          82  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/28-aerdrv]
root          83  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/29-aerdrv]
root          84  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/30-aerdrv]
root          85  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/31-aerdrv]
root          86  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/32-aerdrv]
root          87  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/33-aerdrv]
root          88  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/34-aerdrv]
root          89  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/35-aerdrv]
root          90  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/36-aerdrv]
root          91  0.0  0.0      0     0 ?        S    01:29   0:00 [irq/37-aerdrv]
root          92  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-acpi_thermal_pm]
root          93  0.0  0.0      0     0 ?        S    01:29   0:00 [hwrng]
root          94  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kmpath_rdacd]
root          95  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kaluad]
root          97  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-mld]
root          98  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-ipv6_addrconf]
root         103  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kstrp]
root         110  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u16:0]
root         111  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u17:0-nbd0-recv]
root         112  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u18:0]
root         113  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/u19:0]
root         253  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/1:1H-kblockd]
root         480  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-ata_sff]
root         490  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_0]
root         491  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_0]
root         493  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_1]
root         494  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_1]
root         495  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_2]
root         496  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_2]
root         497  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_3]
root         498  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_3]
root         502  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_4]
root         503  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_4]
root         504  0.0  0.0      0     0 ?        S    01:29   0:00 [scsi_eh_5]
root         505  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-scsi_tmf_5]
root         558  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kdmflush/253:0]
root         565  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-kdmflush/253:1]
root         601  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfsalloc]
root         602  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs_mru_cache]
root         603  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-buf/dm-0]
root         604  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-conv/dm-0]
root         605  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-reclaim/dm-0]
root         606  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-blockgc/dm-0]
root         607  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-inodegc/dm-0]
root         608  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-log/dm-0]
root         609  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-cil/dm-0]
root         610  0.0  0.0      0     0 ?        S    01:29   0:01 [xfsaild/dm-0]
root         807  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-buf/vda2]
root         808  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-conv/vda2]
root         809  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-reclaim/vda2]
root         810  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-blockgc/vda2]
root         811  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-inodegc/vda2]
root         813  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-log/vda2]
root         814  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xfs-cil/vda2]
root         815  0.0  0.0      0     0 ?        S    01:29   0:00 [xfsaild/vda2]
rpc          826  0.0  0.0  11236  3836 ?        Ss   01:29   0:00 /usr/bin/rpcbind -w -f
root         848  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-rpciod]
root         849  0.0  0.0      0     0 ?        I<   01:29   0:00 [kworker/R-xprtiod]
root         854  0.0  0.0  19948  2652 ?        S<sl 01:29   0:01 /sbin/auditd
dbus         860  0.0  0.0   9548  4200 ?        Ss   01:29   0:00 /usr/bin/dbus-broker-launch --scope system --audit
dbus         861  0.2  0.0  15508 10668 ?        S    01:29   0:38 dbus-broker --log 4 --controller 9 --machine-id f9beeda7ec9f42e7bc31f4c56291b529 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
root         865  0.0  0.0  80332  3112 ?        Ssl  01:29   0:00 /usr/sbin/irqbalance
root         866  0.0  0.0  97284  2844 ?        Ssl  01:29   0:00 /usr/bin/qemu-ga --method=virtio-serial --path=/dev/virtio-ports/org.qemu.guest_agent.0 --allow-rpcs=guest-sync-delimited,guest-sync,guest-ping,guest-get-time,guest-set-time,guest-info,guest-shutdown,guest-fsfreeze-status,guest-fsfreeze-freeze,guest-fsfreeze-freeze-list,guest-fsfreeze-thaw,guest-fstrim,guest-suspend-disk,guest-suspend-ram,guest-suspend-hybrid,guest-network-get-interfaces,guest-get-vcpus,guest-set-vcpus,guest-get-disks,guest-get-fsinfo,guest-set-user-password,guest-get-memory-blocks,guest-set-memory-blocks,guest-get-memory-block-info,guest-get-host-name,guest-get-users,guest-get-timezone,guest-get-osinfo,guest-get-devices,guest-ssh-get-authorized-keys,guest-ssh-add-authorized-keys,guest-ssh-remove-authorized-keys,guest-get-diskstats,guest-get-cpustats,guest-network-get-route -F/etc/qemu-ga/fsfreeze-hook
root         867  1.2  0.4 949232 50840 ?        Ssl  01:29   2:57 /usr/sbin/rsyslogd -n
root         876  0.0  0.0  17272  7640 ?        Ss   01:29   0:05 /usr/lib/systemd/systemd-logind
root         927  0.0  0.0 120636  5248 ?        Ssl  01:29   0:00 /usr/sbin/gssproxy -D
root         943  0.0  0.0   4068  1624 tty1     Ss+  01:29   0:00 /sbin/agetty -o -p -- \u --noclear - linux
root         948  0.0  0.0   8052  4052 ?        Ss   01:29   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root        4502  0.0  0.0   8224  2804 ?        Ss   01:30   0:00 /usr/sbin/crond -n
root        4507  0.0  0.0 232712  6444 ?        Ssl  01:30   0:04 /usr/bin/restraintd --port 8081
root       22569  0.1  0.1  26652 13728 ?        Ss   01:31   0:17 /usr/lib/systemd/systemd --user
root       22571  0.0  0.0  13280  1976 ?        S    01:31   0:00 (sd-pam)
root       26902  0.0  0.0   7228  2452 ?        S    01:32   0:00 /usr/bin/bash -l /usr/share/restraint/plugins/task_run.d/10_bash_login /usr/share/restraint/plugins/task_run.d/15_beakerlib /usr/share/restraint/plugins/task_run.d/20_unconfined /usr/share/restraint/plugins/task_run.d/25_environment /usr/share/restraint/plugins/task_run.d/30_restore_events /usr/share/restraint/plugins/task_run.d/35_oom_adj make run
root       26931  0.0  0.0   6052  1440 ?        Ss   01:32   0:00 make run
root       26934  0.0  0.0   7236  2520 ?        S    01:32   0:00 /bin/bash ./runtest.sh
root       26977  0.0  0.1 118324 17756 ?        Sl   01:32   0:01 python -u ./harness.py
chrony     27146  0.0  0.0   9784  2520 ?        S    01:32   0:01 /usr/sbin/chronyd -F 2
root       27271  0.0  0.0 327008 10068 ?        Ssl  01:33   0:00 /usr/sbin/abrtd -d -s
root       27279  0.0  0.2 826128 27388 ?        Ss   01:33   0:01 /usr/bin/abrt-dump-journal-oops -fxtD
root       27280  0.0  0.2 818336 23556 ?        Ss   01:33   0:00 /usr/bin/abrt-dump-journal-core -D -T -f -e
root       28203  0.0  0.0   8260  2708 ?        Ss   01:34   0:00 /usr/bin/dbus-broker-launch --scope user
root       28204  0.0  0.0   4572  1936 ?        S    01:34   0:01 dbus-broker --log 4 --controller 9 --machine-id f9beeda7ec9f42e7bc31f4c56291b529 --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
root       29157  0.0  0.0  33100  9132 ?        Ss   01:35   0:12 /usr/lib/systemd/systemd-udevd
root       29257  0.0  0.1 246732 17536 ?        Ss   01:35   0:01 python3 /usr/local/bin/publish_behave_logs
root       29258  0.0  0.0  18120  8876 ?        Ss   01:35   0:00 /usr/sbin/httpd -DFOREGROUND
apache     29268  0.0  0.0  17776  4392 ?        S    01:35   0:00 /usr/sbin/httpd -DFOREGROUND
apache     29269  0.0  0.0 2091240 6612 ?        Sl   01:35   0:02 /usr/sbin/httpd -DFOREGROUND
apache     29270  0.0  0.0 1960104 6500 ?        Sl   01:35   0:01 /usr/sbin/httpd -DFOREGROUND
apache     29272  0.0  0.0 1960104 6372 ?        Sl   01:35   0:01 /usr/sbin/httpd -DFOREGROUND
dnsmasq    30425  0.0  0.0  12336  1788 ?        S    01:36   0:00 dnsmasq --pid-file=/tmp/dhcp_inbr.pid --dhcp-leasefile=/tmp/dhcp_inbr.lease --listen-address=192.168.100.1 --dhcp-range=192.168.100.10,192.168.100.254,240 --interface=masq --bind-interfaces
dnsmasq    30438  0.0  0.0  12336  1768 ?        S    01:36   0:00 dnsmasq --pid-file=/tmp/dhcp_simbr.pid --dhcp-leasefile=/tmp/dhcp_simbr.lease --dhcp-range=10.16.1.10,10.16.1.254,240 --dhcp-range=2620:52:0:1086::10,2620:52:0:1086::1ff,slaac,64,240 --enable-ra --interface=simbr --bind-interfaces
root       63638  0.0  0.0      0     0 ?        I<   01:42   0:00 [kworker/R-cfg80211]
root       67511  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib-comp-wq]
root       67512  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib-comp-unb-wq]
root       67513  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib_mcast]
root       67514  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-ib_nl_sa_wq]
root       69948  0.0  0.0      0     0 ?        I<   01:43   0:00 [kworker/R-tls-strp]
polkitd    79627  0.0  0.0 306692  7812 ?        Ssl  01:47   0:03 /usr/lib/polkit-1/polkitd --no-debug --log-level=err
root      249179  0.0  0.0      0     0 ?        I    03:25   0:02 [kworker/u13:1-events_unbound]
root      404650  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd0-recv]
root      404651  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd1-recv]
root      404652  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd2-recv]
root      404653  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd3-recv]
root      404655  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd4-recv]
root      404666  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd5-recv]
root      404669  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd6-recv]
root      404672  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd7-recv]
root      404673  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd8-recv]
root      404674  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd9-recv]
root      404678  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd10-recv]
root      404680  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd11-recv]
root      404684  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd12-recv]
root      404685  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd13-recv]
root      404687  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd14-recv]
root      404688  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/R-nbd15-recv]
root      404710  0.0  0.0      0     0 ?        I<   04:06   0:00 [kworker/u17:1]
rpcuser   431395  0.0  0.0  10000  2124 ?        Ss   04:07   0:00 /usr/sbin/rpc.statd
root      431404  0.0  0.0   5232  2968 ?        Ss   04:07   0:00 /usr/sbin/nfsdcld
root      431414  0.0  0.0      0     0 ?        I<   04:07   0:00 [kworker/R-iw_cm_wq]
root      431415  0.0  0.0      0     0 ?        I<   04:07   0:00 [kworker/R-rdma_cm]
root      447487  0.0  0.0      0     0 ?        I<   04:33   0:00 [kworker/0:2H-kblockd]
root      450556  0.0  0.0      0     0 ?        I    04:34   0:00 [kworker/u14:0-events_unbound]
root      478416  1.5  2.4 365156 281484 ?       Ss   04:45   0:36 /usr/lib/systemd/systemd-journald
root      481878  0.0  0.0      0     0 ?        I    04:46   0:01 [kworker/2:4-xfs-conv/dm-0]
root      481887  0.0  0.0      0     0 ?        I    04:46   0:01 [kworker/0:8-xfs-conv/dm-0]
root      482068  0.0  0.0      0     0 ?        I    04:46   0:00 [kworker/u15:2-flush-253:0]
root      523651  0.0  0.0      0     0 ?        I    04:52   0:00 [kworker/u15:3-flush-253:0]
root      572776  0.0  0.0      0     0 ?        I    04:59   0:00 [kworker/1:2-xfs-conv/dm-0]
root      573282  0.0  0.0      0     0 ?        I    04:59   0:00 [kworker/u13:0-flush-253:0]
root      603756  0.0  0.0      0     0 ?        I    05:01   0:00 [kworker/0:1-xfs-conv/dm-0]
root      604353  0.0  0.0      0     0 ?        I    05:03   0:00 [kworker/u14:3-events_unbound]
root      610452  0.0  0.0      0     0 ?        I    05:05   0:00 [kworker/2:1-xfs-conv/dm-0]
root      615467  0.0  0.0      0     0 ?        I    05:06   0:00 [kworker/u15:0-events_unbound]
root      622210  0.0  0.0      0     0 ?        I    05:07   0:00 [kworker/1:3-xfs-conv/dm-0]
root      624653  0.0  0.2 338700 29876 ?        Ssl  05:08   0:00 /usr/bin/python3 -Es /usr/sbin/tuned -l -P
root      624676  0.0  0.0      0     0 ?        I    05:08   0:00 [kworker/u14:1-events_unbound]
root      628147  0.0  0.0      0     0 ?        I    05:09   0:00 [kworker/u13:4-events_unbound]
root      637248  0.0  0.0      0     0 ?        I    05:11   0:00 [kworker/u12:1-ipv6_addrconf]
root      639715  0.0  0.0      0     0 ?        I    05:12   0:00 [kworker/1:1-xfs-conv/dm-0]
root      640166  0.0  0.0      0     0 ?        I    05:13   0:00 [kworker/0:2-xfs-conv/dm-0]
root      641756  0.0  0.0      0     0 ?        I    05:13   0:00 [kworker/2:0-xfs-conv/dm-0]
root      657924  0.0  0.0      0     0 ?        I    05:16   0:00 [kworker/u14:4-events_unbound]
root      660886  0.0  0.0      0     0 ?        I    05:16   0:00 [kworker/u12:2-ipv6_addrconf]
root      671037  0.0  0.0  15320  6856 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-hostnamed
root      672499  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/1:0-xfs-conv/dm-0]
root      672545  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/0:0-xfs-conv/dm-0]
root      673009  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/2:2-xfs-conv/dm-0]
root      673331  0.0  0.0      0     0 ?        I    05:20   0:00 [kworker/u15:1-events_unbound]
root      675644  0.8  0.1 332428 21568 ?        Rsl  05:21   0:00 /usr/sbin/NetworkManager --no-daemon
root      676546  0.0  0.0   2440  1712 ?        Ss   05:21   0:00 /usr/sbin/pptpd -f
root      677415  0.0  0.0   2496  1016 ?        S    05:22   0:00 /sbin/pptp 127.0.0.1 --nolaunchpppd --loglevel 1 --logstring nm-pptp-service-677395
root      677416  0.0  0.0   2496  1640 ?        S    05:22   0:00 pptpd [127.0.0.1]                    
root      678332  0.0  0.0      0     0 ?        Z    05:22   0:00 [python3] <defunct>
root      678341  0.0  0.0  32088 11468 ?        S    05:22   0:00 abrt-server -s
root      678379  0.0  0.0  31480 10892 ?        SN   05:22   0:00 /usr/libexec/abrt-handle-event -i --nice 10 -e notify -- /var/spool/abrt/ccpp-2024-12-19-05:22:15.350370-678100
root      678383  0.0  0.1 327108 12576 ?        Ssl  05:22   0:00 /usr/sbin/abrt-dbus -t133
root      678390  0.0  0.0   6948  3460 ?        SN   05:22   0:00 /bin/sh -c # need comment here. Don't ask me why.         if [ -f /tmp/disable-qe-abrt ] ; then             echo "QE_FAF: reporting disabled, skipping"             rm /var/tmp/qe-faf-processing.$PPID             exit 0         fi         [ -f pkg_name ] && COMPONENT=$(cat pkg_name)         if [ "$COMPONENT" = ""  ] ; then             echo "QE_FAF: crash in unpackaged executable, not reporting"             rm /var/tmp/qe-faf-processing.$PPID             exit 0         fi         # sometimes, we need to wait before processing         PAUSE_TIMEOUT=0         while [ -f /tmp/pause_faf_reporting ] && [ $PAUSE_TIMEOUT -lt 120 ] ; do             echo "QE_FAF: reporting paused, waiting 5s"             sleep 5             PAUSE_TIMEOUT=$(( $PAUSE_TIMEOUT + 5 ))         done         # let's begin         touch /var/tmp/qe-faf-processing.$PPID         ABRT_FORCE_DATA_UPLOAD=${ABRT_FORCE_DATA_UPLOAD:-0}         [ -f /tmp/sth_current_test ] && TASK_SUFFIX=
root      678457  0.0  0.0   7128  3564 ?        S    05:22   0:00 /bin/sh -c run/runtest.sh libreswan_ikev2_require_id_on_cert_subject > result.log 2>&1
root      678459  0.0  0.0   8032  4508 ?        S    05:22   0:00 /bin/bash run/runtest.sh libreswan_ikev2_require_id_on_cert_subject
root      678463  0.0  0.0   5420  1736 ?        S    05:22   0:00 setsid -f -w logger -t runtest
root      678464  0.0  0.0   5420  1804 ?        S    05:22   0:00 setsid -f -w stdbuf -i0 -o0 -e0 tee .tmp/logger_libreswan_ikev2_require_id_on_cert_subject_p
root      678468  0.0  0.0   5464  1892 ?        Ss   05:22   0:00 tee .tmp/logger_libreswan_ikev2_require_id_on_cert_subject_p
root      678469  0.0  0.0   6652  2408 ?        Ss   05:22   0:00 logger -t runtest
root      678541  0.4  0.4 291532 54912 ?        Sl   05:22   0:00 python3l -m behave /mnt/tests/NetworkManager-ci/features/scenarios/libreswan.feature -t RHEL-58040 -t fedoraver+=43 -t rhelver+=9 -t libreswan -t ikev2 -t libreswan_ikev2_require_id_on_cert_subject --no-capture --no-skipped -f html-pretty -o /tmp/report_NetworkManager-ci_Test0956_libreswan_ikev2_require_id_on_cert_subject.html -f plain
root      678638  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:3-xfs-conv/dm-0]
root      678658  0.1  0.1 256536 16912 ?        Ssl  05:22   0:00 /usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf --nofork
root      679303  0.0  0.0      0     0 ?        Zs   05:22   0:00 [journalctl] <defunct>
root      679325 14.8  2.8 1092936 337784 ?      SNl  05:22   0:07 /usr/bin/python3 -sP /usr/sbin/sosreport --tmp-dir /var/spool/abrt/ccpp-2024-12-19-05:22:15.350370-678100 --batch
root      680920  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:3-xfs-conv/dm-0]
root      680921  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:4-xfs-conv/dm-0]
root      680922  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:5-xfs-conv/dm-0]
root      680923  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:6-xfs-conv/dm-0]
root      680924  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:7-xfs-conv/dm-0]
root      680925  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:9-xfs-conv/dm-0]
root      680926  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:10-xfs-conv/dm-0]
root      680927  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:11-xfs-conv/dm-0]
root      680928  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:12-xfs-conv/dm-0]
root      680929  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:13-xfs-conv/dm-0]
root      680930  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:14-xfs-conv/dm-0]
root      680931  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:15-xfs-conv/dm-0]
root      680932  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:5-xfs-conv/dm-0]
root      680933  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:6-xfs-conv/dm-0]
root      680934  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:7-xfs-conv/dm-0]
root      680935  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:8-events]
root      680936  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:9-xfs-conv/dm-0]
root      680937  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:10-xfs-conv/dm-0]
root      680938  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/2:11-xfs-conv/dm-0]
root      680939  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:16-xfs-conv/dm-0]
root      680940  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:17-xfs-conv/dm-0]
root      680941  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:4-xfs-conv/dm-0]
root      680942  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:18-xfs-conv/dm-0]
root      680943  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:5-xfs-conv/dm-0]
root      680944  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:19-xfs-conv/dm-0]
root      680945  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:20-xfs-conv/dm-0]
root      680946  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:21-xfs-conv/dm-0]
root      680947  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:22-xfs-conv/dm-0]
root      680948  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:23-xfs-conv/dm-0]
root      680949  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:24-xfs-conv/dm-0]
root      680950  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:25-xfs-conv/dm-0]
root      680951  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:26-xfs-conv/dm-0]
root      680952  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:27-xfs-conv/dm-0]
root      680953  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:28-xfs-conv/dm-0]
root      680954  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:29-xfs-conv/dm-0]
root      680955  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:30-xfs-conv/dm-0]
root      680956  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:31-xfs-conv/dm-0]
root      680957  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:32-xfs-conv/dm-0]
root      680958  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:33-xfs-conv/dm-0]
root      680959  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:6-events]
root      680960  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:7-xfs-conv/dm-0]
root      680961  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:8-xfs-conv/dm-0]
root      680962  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:9-xfs-conv/dm-0]
root      680963  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:10-xfs-conv/dm-0]
root      680964  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/1:11-xfs-conv/dm-0]
root      680969  0.0  0.0      0     0 ?        I    05:22   0:00 [kworker/0:34-events]
root      681069  0.0  0.0   2876  1628 ?        SN   05:22   0:00 timeout 300s journalctl --no-pager --boot
root      681072 93.0  0.8 829396 93556 ?        RN   05:22   0:37 journalctl --no-pager --boot
root      681135  0.0  0.0   2876  1620 ?        SN   05:22   0:00 timeout 300s journalctl --no-pager --unit NetworkManager
root      681137 92.3  0.6 825964 78012 ?        RN   05:22   0:37 journalctl --no-pager --unit NetworkManager
root      682547  0.4  0.5 168312 62308 ?        Ssl  05:22   0:00 /usr/bin/python3 /usr/libexec/rhsm-service
root      683512  0.0  0.0  15308  6456 ?        Ss   05:23   0:00 /usr/lib/systemd/systemd-timedated
root      683529  0.0  0.0 315840 11220 ?        Rl   05:23   0:00 nmcli -f ALL g
root      683530  0.0  0.0      0     0 ?        Z    05:23   0:00 [nmcli] <defunct>
root      683531  0.0  0.0      0     0 ?        Z    05:23   0:00 [nmcli] <defunct>
root      683539  0.0  0.0 315840 11236 ?        R    05:23   0:00 [nmcli]
root      683540  0.0  0.0      0     0 ?        Z    05:23   0:00 [cat] <defunct>
root      683541  0.0  0.0      0     0 ?        Z    05:23   0:00 [ip] <defunct>
root      683542  0.0  0.0      0     0 ?        Z    05:23   0:00 [ip] <defunct>
root      683543  0.0  0.0      0     0 ?        Z    05:23   0:00 [ip] <defunct>
root      683544  0.0  0.0      0     0 ?        Z    05:23   0:00 [ip] <defunct>
root      683552  0.0  0.0      0     0 ?        Z    05:23   0:00 [ip] <defunct>
root      683553  0.0  0.0      0     0 ?        Z    05:23   0:00 [ip] <defunct>
root      683554  0.0  0.0      0     0 ?        Z    05:23   0:00 [nft] <defunct>
root      683556  0.0  0.0   9168  4572 ?        R    05:23   0:00 ps aux
root      683557  0.0  0.0      0     0 ?        Z    05:23   0:00 [free] <defunct>
root      683559  0.0  0.0      0     0 ?        Z    05:23   0:00 [df] <defunct>
root      683560  0.0  0.0      0     0 ?        Z    05:23   0:00 [nft] <defunct>



free -mt

               total        used        free      shared  buff/cache   available
Mem:           11415        1539         153          95       10134        9875
Swap:           5119          25        5094
Total:         16535        1565        5247



df -m

Filesystem                            1M-blocks  Used Available Use% Mounted on
/dev/mapper/rhel_wifi3--ml5--vm4-root     44988 17423     27566  39% /
devtmpfs                                      4     0         4   0% /dev
tmpfs                                      5708     1      5708   1% /dev/shm
tmpfs                                      2284    92      2192   5% /run
/dev/vda2                                   960   221       740  23% /boot
tmpfs                                         1     0         1   0% /run/credentials/getty@tty1.service
tmpfs                                      1142     1      1142   1% /run/user/0
tmpfs                                         1     0         1   0% /run/credentials/systemd-journald.service



lshw -class network -businfo -numeric

Bus info          Device     Class          Description
=======================================================
pci@0000:01:00.0             network        Virtio 1.0 network device [1AF4:1041]
virtio@1          eth0       network        Ethernet interface



nft list ruleset

table inet netavark {
	chain INPUT {
		type filter hook input priority filter; policy accept;
	}

	chain FORWARD {
		type filter hook forward priority filter; policy accept;
		ct state invalid drop
		jump NETAVARK-ISOLATION-1
	}

	chain POSTROUTING {
		type nat hook postrouting priority srcnat; policy accept;
		meta mark & 0x00002000 == 0x00002000 masquerade
	}

	chain PREROUTING {
		type nat hook prerouting priority dstnat; policy accept;
		fib daddr type local jump NETAVARK-HOSTPORT-DNAT
	}

	chain OUTPUT {
		type nat hook output priority dstnat; policy accept;
		fib daddr type local jump NETAVARK-HOSTPORT-DNAT
	}

	chain NETAVARK-HOSTPORT-DNAT {
	}

	chain NETAVARK-HOSTPORT-SETMARK {
		meta mark set meta mark | 0x00002000
	}

	chain NETAVARK-ISOLATION-1 {
	}

	chain NETAVARK-ISOLATION-2 {
	}

	chain NETAVARK-ISOLATION-3 {
		jump NETAVARK-ISOLATION-2
	}
}
table ip filter {
	chain OUTPUT {
		type filter hook output priority filter; policy accept;
	}

	chain INPUT {
		type filter hook input priority filter; policy accept;
	}

	chain FORWARD {
		type filter hook forward priority filter; policy accept;
	}
}
table ip nat {
	chain POSTROUTING {
		type nat hook postrouting priority srcnat; policy accept;
	}
}


Daemon memory consumption: 4240 KiB


Status duration: 0.138s

NMCI_RANDOM_SEED=2584915959

Detected version: ('upstream', [1, 51, 5, 33630]) on ('rhel', [10, 0])
(60) STDOUT
Download
Executing @libreswan
* waiting for testeth0 to connect
 ** we do have IPv4 complete
  @libreswan ... passed in 1.519s
NetworkManager process id before: 675644
before_scenario ... passed in 1.686s

  Scenario: nmcli - libreswan - test require ID on certs in subject
Will ensure NetworkManager-libreswan 1.2.22-3.el10
    * Ensure that version of "NetworkManager-libreswan" package is at least ... passed in 0.011s
      | version       | distro  |
      | 1.2.22-5.el9  | rhel9   |
      | 1.2.22-2.el9  | rhel9.6 |
      | 1.2.22-2.el9  | c9s     |
      | 1.2.22-3.el10 | rhel10  |
    * Add "libreswan" VPN connection named "libreswan" for device "\*" ... passed in 0.014s
    * Modify connection "libreswan" changing options ... passed in 0.017s
      """
      vpn.data "ikev2=insist, leftcert=LibreswanClient, leftid=%fromcert, right=11.12.13.14, rightid=CN=libreswan_server, require-id-on-certificate=yes"
      """
    * Bring "up" connection "libreswan" ... passed in 0.106s
    Then "11.12.13.0/24 [^\n]*dev libreswan1" is visible with command "ip route" ... passed in 0.002s
    Then "VPN.VPN-STATE:[^\n]*VPN connected" is visible with command "nmcli c show libreswan" ... passed in 0.018s
    Then "IP4.ADDRESS[^\n]*172.29.100.2/32" is visible with command "nmcli c show libreswan" ... passed in 0.525s
    Then "IP4.ADDRESS[^\n]*172.29.100.2/32" is visible with command "nmcli d show libreswan1" ... passed in 0.012s
    Then "IP4.ADDRESS[^\n]*11.12.13.15/24" is visible with command "nmcli d show libreswan1" ... passed in 0.013s
    Then "VPN.GATEWAY:[^\n]*11.12.13.14" is visible with command "nmcli c show libreswan" ... passed in 0.013s
    * Bring "down" connection "libreswan" ... passed in 0.028s
    * Commentary ... passed in 0.000s
      """
      Setting rightid to CN=something will force libreswan to match subject directly
      and require-id-on-certificate has no effect
      """
    * Modify connection "libreswan" changing options "+vpn.data 'rightid=CN=invalid_cert'" ... passed in 0.019s
    Then Fail up connection "libreswan" in "10" seconds ... passed in 0.080s
    * Execute "nmcli con down id libreswan 2>&1 || true" ... passed in 0.014s
    * Modify connection "libreswan" changing options "+vpn.data 'require-id-on-certificate=no'" ... passed in 0.014s
    Then Fail up connection "libreswan" in "10" seconds ... passed in 0.095s
    * Execute "nmcli con down id libreswan 2>&1 || true" ... passed in 0.013s
    * Commentary ... passed in 0.000s
      """
      Setting rightid to string without 'CN=' will force libreswan to match subject directly
      and require-id-on-certificate should work properly now.
      """
    * Modify connection "libreswan" changing options "+vpn.data 'rightid=invalid_id, require-id-on-certificate=yes'" ... passed in 0.017s
    Then Fail up connection "libreswan" in "10" seconds ... passed in 0.080s
    * Execute "nmcli con down id libreswan 2>&1 || true" ... passed in 0.014s
    * Modify connection "libreswan" changing options "+vpn.data 'require-id-on-certificate=no'" ... passed in 0.019s
    * Bring "up" connection "libreswan" ... passed in 0.092s
    Then "11.12.13.0/24 [^\n]*dev libreswan1" is visible with command "ip route" ... passed in 0.002s
    Then "VPN.VPN-STATE:[^\n]*VPN connected" is visible with command "nmcli c show libreswan" ... passed in 0.019s
NetworkManager process id after: 675644 (now 675644)
cleanup action tag-libreswan (priority 10) ...Executing @libreswan
Attach Libreswan logs
* waiting for testeth0 to connect
 ** we do have IPv4 complete
  @libreswan ... passed in 0.154s
 passed in 0.154s
cleanup action nmcli-connection-libreswan (priority 20) ... passed in 0.020s
Examining crash: /var/lib/systemd/coredump/core.pluto.0.6de80ed4692d47f5a00a1342ea3976be.678100.1734582135000000.zst
Entering crash dir: /var/spool/abrt/ccpp-2024-12-19-05:22:15.350370-678100
* not yet reported, new crash
QE_FAF did not start in 60s, quitting...
Attaching FAF, /var/spool/abrt/ccpp-2024-12-19-05:22:15.350370-678100-1734582135
Attaching NM log


!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! NM CRASHED. NEEDS INSPECTION. FAILING THE TEST                      !!
!!  CRASHING STEP: PID change not detected, but coredump reported.             !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Error Message
Download
HOOK-ERROR in after_scenario: AssertionError: Crash happened
Error Traceback
Download
Traceback (most recent call last):
  File "/usr/lib/python3.12/site-packages/behave/runner.py", line 669, in run_hook
    self.hooks[name](context, *args)
  File "features/environment.py", line 313, in after_scenario
    raise E
  File "features/environment.py", line 308, in after_scenario
    status = _after_scenario(context, scenario)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "features/environment.py", line 489, in _after_scenario
    assert False, "Crash happened"
           ^^^^^
AssertionError: Crash happened