[Swan-dev] testing shutdowns of pluto?

Paul Wouters paul at nohats.ca
Wed Jul 27 09:49:56 UTC 2016


I think we are seeing a few false positives if during final.sh (or just
after it when one end is still executing final.sh) one end shut down and
sends a delete/notify to the other. It can be processed before in
final.sh it runs ipsec look, which then shows up as a missing IPsec SA.

For example:



This was probably one reason to not call shutdown in final.sh mostly,
although some testcases need to do some specific test and do that,
such as the nflog ones.


More information about the Swan-dev mailing list