[Swan-dev] testing yesterday's tree

D. Hugh Redelmeier hugh at mimosa.com
Mon May 14 19:33:51 UTC 2018


More about my test run.

I don't have time to analyze all the failures, but here's a start.
Some look like things that should be fixed in the sanitizer scripts.
Some look like things that should be fixed in the reference logs.
I've marked those with ####.

The problem with certificates looks important.

packets lost
testing/pluto/ikev2-delete-05-sa-start failed west:output-different
testing/pluto/ikev1-algo-esp-sha2-01-netkey-klips failed west:output-different
testing/pluto/ikev1-algo-esp-sha2-02-netkey-klips failed west:output-different
testing/pluto/interop-ikev2-strongswan-39-mobike-responder failed east:output-different road:output-different

SA established late?
testing/pluto/ikev2-delete-06-start-both failed west:output-different
testing/pluto/ikev2-41-rw-replace failed east:output-different

####
+192.0.2.100 dev eth1  scope link 
testing/pluto/ikev2-32-nat-rw-rekey failed east:output-different
testing/pluto/ikev2-41-rw-replace failed east:output-different
testing/pluto/ikev2-42-rw-replace-responder failed east:output-different

+0.0.0.0/1 via 192.1.3.254 dev eth0  src 192.0.2.100 
 default via 192.1.3.254 dev eth0 
+128.0.0.0/1 via 192.1.3.254 dev eth0  src 192.0.2.100 
testing/pluto/ikev2-30-rw-no-rekey failed road:output-different

-| "westnet-eastnet" #1: discarding duplicate packet; already STATE_MAIN_I2
testing/pluto/ikev1-impair-01-replay-duplicates failed west:output-different

-002 "road-eastnet-ikev2" #2: certificate verified OK: E=user-east at testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA
+"road-eastnet-ikev2"[2] 192.1.3.34 #3: cannot route -- route already in use for "road-eastnet-ikev2"[1] 192.1.3.33
[and more]
testing/pluto/ikev2-27-uniqueid failed east:output-different north:output-different
testing/pluto/ikev2-10-2behind-nat failed east:output-different road:output-different

+010 "westnet-eastnet-ipv4-psk-ikev2-ccm-a" #2: STATE_PARENT_I2: retransmission; will wait 0.5 seconds for response
testing/pluto/ikev2-algo-03-aes-ccm failed west:output-different

####
-192.0.2.0/24 via 192.1.2.23 dev eth1 
testing/pluto/ikev2-algo-ike-dh-ecp-01 failed west:output-different
testing/pluto/ikev2-unknown-payload-01-sa-init failed west:output-different
testing/pluto/ikev2-unknown-payload-02-auth failed west:output-different

-2 packets transmitted, 2 received, 0% packet loss, time XXXX
-rtt min/avg/max/mdev = 0.XXX/0.XXX/0.XXX/0.XXX ms
+2 packets transmitted, 0 received, 100% packet loss, time XXXX
testing/pluto/interop-ikev2-strongswan-38-mobike-pool failed east:output-different road:output-different

####
-	proto esp spi 0xSPISPIXX reqid REQID mode tunnel
+	proto esp spi 0xSPISPI reqid REQID mode tunnel
testing/pluto/interop-ikev2-strongswan-38-mobike-pool failed east:output-different road:output-different
testing/pluto/interop-ikev2-strongswan-38-mobike-initiator failed north:output-different
testing/pluto/interop-ikev2-strongswan-39-mobike-responder failed east:output-different road:output-different

####
-3: ip_vti0 at NONE: <NOARP> mtu 1332 qdisc noop state DOWN group default qlen 1000
+3: ip_vti0 at NONE: <NOARP> mtu 1332 qdisc noop state DOWN group default 
testing/pluto/interop-ikev2-strongswan-39-mobike-responder failed east:output-different road:output-different

####
-	proto esp spi 0xSPISPIXX reqid REQID mode tunnel
+	proto esp spi 0xSPISPIXX reqid REQIDREQID mode tunnel
testing/pluto/interop-ikev2-strongswan-39-mobike-responder failed east:output-different road:output-different
-003 "westnet-eastnet-ipv4-psk-ikev2" #3: reschedule pending Phase 2 of connection"westnet-eastnet-ipv4-psk-ikev2" state #4: - the parent is going away
+003 "westnet-eastnet-ipv4-psk-ikev2" #3: reschedule pending child #4 STATE_PARENT_I2 of connection "westnet-eastnet-ipv4-psk-ikev2" - the parent is going away
testing/pluto/ikev2-unknown-payload-02-auth failed west:output-different

====

The rest have not been examined.

testing/pluto/ikev2-unknown-payload-03-auth-sk failed west:output-different
testing/pluto/ikev2-impair-04-corrupt-auth-sk-payload failed west:output-different
testing/pluto/ikev1-x509-05-san-firstemail-match failed west:output-different
testing/pluto/ikev1-x509-07-san-ip-mismatch failed west:output-different
testing/pluto/ikev1-x509-08-san-dns-mismatch failed west:output-different
testing/pluto/ikev2-x509-20-multicert-rightid-san-wildcard failed west:output-different
testing/pluto/ikev2-switchnat-01 failed road:output-different
testing/pluto/nflog-01-global failed west:output-different
testing/pluto/nflog-03-conns failed west:output-different
testing/pluto/netkey-vti-01 failed west:output-different
testing/pluto/netkey-vti-05 failed west:output-different
testing/pluto/netkey-vti-06 failed road:output-different
testing/pluto/newoe-06-prio failed east:output-different road:output-different
testing/pluto/newoe-07-ike-replace-initiator failed road:output-different
testing/pluto/newoe-15-portpass failed east:output-different road:output-different
testing/pluto/newoe-20-ipv6 failed east:output-different road:output-different
testing/pluto/newoe-21-liveness-clear failed east:output-different road:output-different
testing/pluto/newoe-23-reverse-nat failed east:output-different road:output-different
testing/pluto/newoe-25-cat-2 failed road:output-different
testing/pluto/newoe-25-cat-3-4-way failed north:output-different road:output-different
testing/pluto/newoe-25-cat-4 failed road:output-different
testing/pluto/newoe-27-replace-sa failed road:output-different
testing/pluto/newoe-27-replace-sa-authnull failed east:output-different road:output-different
testing/pluto/certoe-07-nat-2-clients failed east:output-different north:output-different road:output-different
testing/pluto/newoe-18-poc-cop-port22 failed road:output-different
testing/pluto/ikev2-asymmetric-01-parsing failed west:output-different
testing/pluto/ikev2-asymmetric-16-auth-mismatch failed west:output-different
testing/pluto/dpd-01 failed west:output-different
testing/pluto/dpd-02 failed west:output-different
testing/pluto/dpd-03 failed west:output-different
testing/pluto/dpd-04 failed west:output-different
testing/pluto/dpd-05 failed west:output-different
testing/pluto/dpd-06 failed west:output-different
testing/pluto/dpd-07 failed west:output-different
testing/pluto/dpd-09-shared failed north:output-different
testing/pluto/ikev2-liveness-01 unresolved east:output-missing west:output-missing
testing/pluto/ikev2-liveness-02 unresolved east:output-missing west:output-missing
testing/pluto/ikev2-liveness-03 unresolved east:output-missing west:output-missing
testing/pluto/ikev2-liveness-05 failed west:output-different
testing/pluto/x509-pluto-02 failed north:output-different
testing/pluto/x509-pluto-04 unresolved east:output-missing west:output-missing
testing/pluto/x509-pluto-05 unresolved east:output-missing west:output-missing
testing/pluto/x509-pluto-frag-00 unresolved east:output-missing nic:output-missing road:output-missing
testing/pluto/x509-pluto-frag-01 failed east:output-different road:output-different
testing/pluto/x509-pluto-frag-02 failed east:output-different road:output-different
testing/pluto/xauth-pluto-22 failed east:output-different road:output-different
testing/pluto/xauth-pluto-24-static-addresspool failed east:output-different north:output-different road:output-different
testing/pluto/interop-ikev2-strongswan-34-esp-null-responder failed west:output-different
testing/pluto/aggr-pluto-02 failed west:output-different
testing/pluto/klips-algo-twofish-01 failed west:output-different
testing/pluto/klips-algo-serpent-01 failed west:output-different
testing/pluto/klips-algo-cast-01 failed west:output-different
testing/pluto/klips-basic-pluto-01 failed east:output-different
testing/pluto/multinet-01 failed west:output-different
testing/pluto/ah-pluto-07-klips-netkey failed west:output-different
testing/pluto/interop-ikev1-strongswan-11-ah-initiator-sha512 failed west:output-different
testing/pluto/interop-ikev2-strongswan-07-strongswan failed west:output-different
testing/pluto/interop-ikev2-strongswan-29-responder-rekey failed west:output-different
testing/pluto/interop-ikev2-strongswan-35-rekey-reauth failed east:output-different west:output-different
testing/pluto/l2tp-01 failed north:output-different
testing/pluto/l2tp-02 failed north:output-different
testing/pluto/fips-08-ikev2-x509 failed east:output-different west:output-different
testing/pluto/fips-10-ikev2-psk failed west:output-different
testing/pluto/klips-passthrough-00 failed west:output-different
testing/pluto/nss-cert-crl-03 failed west:output-different
testing/pluto/nss-cert-crl-03-strict failed west:output-different
testing/pluto/nss-cert-09-notyetvalid-initiator failed east:output-different west:output-different
testing/pluto/nss-cert-10-notyetvalid-responder-ikev2 failed east:output-different west:output-different
testing/pluto/seccomp-03-updown failed road:output-different


More information about the Swan-dev mailing list