/testing/guestbin/swan-prep --userland strongswan --x509
east #
 # strongswan expects the certs in /etc/strongswan/certs for some reason
east #
 mkdir -p /etc/strongswan/certs
east #
 cp -a /etc/strongswan/ipsec.d/certs/* /etc/strongswan/certs/
east #
 strongswan starter --debug-all
Starting strongSwan 5.4.0 IPsec [starter]...
Loading config setup
Loading conn 'san'
  aggressive=yes
  authby=rsasig
  auto=add
  esp=aes-sha1-modp1536
  ike=aes-sha1-modp1536
  keyexchange=ikev1
  left=192.1.2.45
  leftid=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=west.testing.libreswan.org, E=user-west@testing.libreswan.org
  leftsendcert=always
  right=192.1.2.23
  rightca=/testing/x509/cacerts/mainca.crt
  rightcert=/testing/x509/certs/east.crt
  rightid=C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=east.testing.libreswan.org, E=user-east@testing.libreswan.org
  rightsendcert=always
found netkey IPsec stack
east #
 echo "initdone"
initdone
east #
 # confirm the right ID types were sent/received
east #
 grep "ID type" /tmp/pluto.log
grep: /tmp/pluto.log: No such file or directory
east #
east #
 if [ -n "`ls /tmp/core* 2>/dev/null`" ]; then echo CORE FOUND; mv /tmp/core* OUTPUT/; fi
east #
 if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi

