I suspect the conn might be using auto=add in the config instead of our usual auto=ignore and then the init script does an ipsec auto —add causing a delete plus add ?
Sent using a virtual keyboard on a phone > On Jun 30, 2021, at 17:36, Vukašin Karadžić <[email protected]> > wrote: > > > Hi all, > > Although it has been there from the time test was first added, just now I am > paying attention to the fact that in ikev2-redirect-02-auth [1] on the > startup the east has an unnecessary dummy addition and then removal of same > connection [2], only to have the connection then added again (triggered via > and have test continue to run as intended. > "002 "westnet-eastnet-ipv4-psk-ikev2": terminating SAs using this connection" > in [2] comes from the 'real' connection addition; east deletes the previously > dummy added one in order to add the real one. > I can't figure out why is this dummy addition happening. It's not happening > on west, and it's not happening in other tests as well (eg. > ikev2-redirect-01-*, or plain ikev2-[01,...] tests). The first difference in > east pluto log files between in ikev2-redirect-02-auth and for example > ikev2-05-basic-psk appears in the first "whack: ..." log line. > > In ikev2-redirect-02-auth I have: > | whack: start: delete 'westnet-eastnet-ipv4-psk-ikev2' (fd@0x560b99591798) > right after which the dummy addition is triggered. > > In ikev2-05-basic-psk I have: > | whack: start: listen (fd@0x556d255e3848) > > Why is the first whack message east receives in ikev2-redirect-02-auth > containing whack_delete, while at the same time in other tests the first > whack message east receives is whack_listen? eastinit.sh is the same in both > cases. > > Cheers, > Vukasin > > [1] > https://testing.libreswan.org/v4.4-573-g689dbcc160-main/ikev2-redirect-02-auth/ > [2] > https://testing.libreswan.org/v4.4-573-g689dbcc160-main/ikev2-redirect-02-auth/east.console.txt > _______________________________________________ > Swan-dev mailing list > [email protected] > https://lists.libreswan.org/mailman/listinfo/swan-dev
_______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
