[Swan-dev] testing shutdowns of pluto?

Paul Wouters paul at nohats.ca
Wed Jul 27 09:49:56 UTC 2016


hi,

I think we are seeing a few false positives if during final.sh (or just
after it when one end is still executing final.sh) one end shut down and
sends a delete/notify to the other. It can be processed before in
final.sh it runs ipsec look, which then shows up as a missing IPsec SA.

For example:

http://testing.libreswan.org/results/testing/2016-07-26-1948-3.18dr3-207-g57f5c49-dirty-master/nflog-01-global/OUTPUT/west.console.diff

http://testing.libreswan.org/results/testing/2016-07-26-1948-3.18dr3-207-g57f5c49-dirty-master/nflog-03-conns/OUTPUT/east.console.diff

This was probably one reason to not call shutdown in final.sh mostly,
although some testcases need to do some specific test and do that,
such as the nflog ones.

Paul


More information about the Swan-dev mailing list