hi,
I think we are seeing a few false positives if during final.sh (or just after it when one end is still executing final.sh) one end shut down and sends a delete/notify to the other. It can be processed before in final.sh it runs ipsec look, which then shows up as a missing IPsec SA. For example: http://testing.libreswan.org/results/testing/2016-07-26-1948-3.18dr3-207-g57f5c49-dirty-master/nflog-01-global/OUTPUT/west.console.diff http://testing.libreswan.org/results/testing/2016-07-26-1948-3.18dr3-207-g57f5c49-dirty-master/nflog-03-conns/OUTPUT/east.console.diff This was probably one reason to not call shutdown in final.sh mostly, although some testcases need to do some specific test and do that, such as the nflog ones. Paul _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
