[strongSwan] SAs do not establish with OpenBSD iked

[readme at catastrophe.net]

On Mon, Mar 28, 2022 at 10:53:11AM +0200, Tobias Brunner wrote:
>Hi,
>
>Please add the strongSwan log (see [1] for a config snippet).

Hi Tobias, 

I did make some progress with finding that leftid and rightid should be 
used in ipsec.secrets, but I'm still hitting an issue of:

Mon, 2022-03-28, 10:15:37 10[IKE] <OPENBSD_GW|1> authentication of 'openbsd' with pre-shared key successful
Mon, 2022-03-28, 10:15:37 10[CFG] <OPENBSD_GW|1> constraint requires public key authentication, but pre-shared key was used
Mon, 2022-03-28, 10:15:37 10[CFG] <OPENBSD_GW|1> selected peer config 'OPENBSD_GW' unacceptable: constraint checking failed

Here is the full logfile:

Mon, 2022-03-28, 10:15:36 00[DMN] Starting IKE charon daemon (strongSwan 5.9.1, Linux 5.10.103-v7+, armv7l)
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'aes': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'rc2': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'sha2': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'sha1': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'md5': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'mgf1': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'random': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'nonce': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'x509': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'revocation': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'constraints': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pubkey': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pkcs1': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pkcs7': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pkcs8': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pkcs12': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pgp': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'dnskey': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'sshkey': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'pem': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'openssl': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'fips-prf': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'gmp': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'agent': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'xcbc': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'hmac': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'gcm': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'drbg': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'attr': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'kernel-netlink': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'resolve': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'socket-default': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'connmark': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'stroke': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'updown': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'eap-mschapv2': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'xauth-generic': loaded successfully
Mon, 2022-03-28, 10:15:36 00[LIB] plugin 'counters': loaded successfully
Mon, 2022-03-28, 10:15:36 00[KNL] known interfaces and IP addresses:
Mon, 2022-03-28, 10:15:36 00[KNL]   lo
Mon, 2022-03-28, 10:15:36 00[KNL]     127.0.0.1
Mon, 2022-03-28, 10:15:36 00[KNL]     ::1
Mon, 2022-03-28, 10:15:36 00[KNL]   eth0
Mon, 2022-03-28, 10:15:36 00[KNL]     192.168.13.1
Mon, 2022-03-28, 10:15:36 00[KNL]   wlan0
Mon, 2022-03-28, 10:15:36 00[KNL]     10.1.1.228
Mon, 2022-03-28, 10:15:36 00[KNL]     10.1.1.229
Mon, 2022-03-28, 10:15:36 00[LIB] feature PUBKEY:BLISS in plugin 'pem' has unmet dependency: PUBKEY:BLISS
Mon, 2022-03-28, 10:15:36 00[LIB] feature PUBKEY:DSA in plugin 'pem' has unmet dependency: PUBKEY:DSA
Mon, 2022-03-28, 10:15:36 00[LIB] feature PRIVKEY:DSA in plugin 'pem' has unmet dependency: PRIVKEY:DSA
Mon, 2022-03-28, 10:15:36 00[LIB] feature PRIVKEY:BLISS in plugin 'pem' has unmet dependency: PRIVKEY:BLISS
Mon, 2022-03-28, 10:15:36 00[LIB] feature CERT_DECODE:OCSP_REQUEST in plugin 'pem' has unmet dependency: CERT_DECODE:OCSP_REQUEST
Mon, 2022-03-28, 10:15:36 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
Mon, 2022-03-28, 10:15:36 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
Mon, 2022-03-28, 10:15:36 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
Mon, 2022-03-28, 10:15:36 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
Mon, 2022-03-28, 10:15:36 00[CFG] loading crls from '/etc/ipsec.d/crls'
Mon, 2022-03-28, 10:15:36 00[CFG] loading secrets from '/etc/ipsec.secrets'
Mon, 2022-03-28, 10:15:36 00[CFG]   loaded IKE secret for 192.168.13.1 10.1.1.9
Mon, 2022-03-28, 10:15:36 00[CFG]   loaded IKE secret for "swan.example.com" "openbsd"
Mon, 2022-03-28, 10:15:36 00[LIB] loaded plugins: charon aes rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm drbg attr kernel-netlink resolve socket-default connmark stroke updown eap-mschapv2 xauth-generic counters
Mon, 2022-03-28, 10:15:36 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
Mon, 2022-03-28, 10:15:36 00[LIB] dropped capabilities, running as uid 0, gid 0
Mon, 2022-03-28, 10:15:36 00[JOB] spawning 16 worker threads
Mon, 2022-03-28, 10:15:36 01[LIB] created thread 01 [1869]
Mon, 2022-03-28, 10:15:36 02[LIB] created thread 02 [1870]
Mon, 2022-03-28, 10:15:36 03[LIB] created thread 03 [1871]
Mon, 2022-03-28, 10:15:36 04[LIB] created thread 04 [1872]
Mon, 2022-03-28, 10:15:36 05[LIB] created thread 05 [1873]
Mon, 2022-03-28, 10:15:36 06[LIB] created thread 06 [1874]
Mon, 2022-03-28, 10:15:36 07[LIB] created thread 07 [1875]
Mon, 2022-03-28, 10:15:36 08[LIB] created thread 08 [1876]
Mon, 2022-03-28, 10:15:36 09[LIB] created thread 09 [1877]
Mon, 2022-03-28, 10:15:36 10[LIB] created thread 10 [1878]
Mon, 2022-03-28, 10:15:36 11[LIB] created thread 11 [1879]
Mon, 2022-03-28, 10:15:36 12[LIB] created thread 12 [1880]
Mon, 2022-03-28, 10:15:36 13[LIB] created thread 13 [1881]
Mon, 2022-03-28, 10:15:36 14[LIB] created thread 14 [1882]
Mon, 2022-03-28, 10:15:36 15[LIB] created thread 15 [1883]
Mon, 2022-03-28, 10:15:36 16[LIB] created thread 16 [1884]
Mon, 2022-03-28, 10:15:36 05[CFG] received stroke: add connection 'OPENBSD_GW'
Mon, 2022-03-28, 10:15:36 05[CFG] conn OPENBSD_GW
Mon, 2022-03-28, 10:15:36 05[CFG]   left=192.168.13.1
Mon, 2022-03-28, 10:15:36 05[CFG]   leftsubnet=192.168.13.0/24
Mon, 2022-03-28, 10:15:36 05[CFG]   leftauth=secret
Mon, 2022-03-28, 10:15:36 05[CFG]   leftid=swan.example.com
Mon, 2022-03-28, 10:15:36 05[CFG]   right=10.1.1.9
Mon, 2022-03-28, 10:15:36 05[CFG]   rightsubnet=192.168.253.0/27
Mon, 2022-03-28, 10:15:36 05[CFG]   rightid=openbsd
Mon, 2022-03-28, 10:15:36 05[CFG]   ike=aes256-sha512-modp4096
Mon, 2022-03-28, 10:15:36 05[CFG]   esp=aes256-sha512-modp4096
Mon, 2022-03-28, 10:15:36 05[CFG]   dpddelay=30
Mon, 2022-03-28, 10:15:36 05[CFG]   dpdtimeout=150
Mon, 2022-03-28, 10:15:36 05[CFG]   sha256_96=no
Mon, 2022-03-28, 10:15:36 05[CFG]   mediation=no
Mon, 2022-03-28, 10:15:36 05[CFG]   keyexchange=ikev2
Mon, 2022-03-28, 10:15:36 05[KNL] 10.1.1.9 is not a local address or the interface is down
Mon, 2022-03-28, 10:15:36 05[CFG] added configuration 'OPENBSD_GW'
Mon, 2022-03-28, 10:15:36 07[CFG] received stroke: initiate 'OPENBSD_GW'
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_VENDOR task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_INIT task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_NATD task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_CERT_PRE task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_AUTH task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_CERT_POST task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_CONFIG task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_AUTH_LIFETIME task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_MOBIKE task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing IKE_ME task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> queueing CHILD_CREATE task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> activating new tasks
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_VENDOR task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_INIT task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_NATD task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_CERT_PRE task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_ME task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_AUTH task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_CERT_POST task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_CONFIG task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating CHILD_CREATE task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_AUTH_LIFETIME task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1>   activating IKE_MOBIKE task
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> initiating IKE_SA OPENBSD_GW[1] to 10.1.1.9
Mon, 2022-03-28, 10:15:36 07[IKE] <OPENBSD_GW|1> IKE_SA OPENBSD_GW[1] state change: CREATED => CONNECTING
Mon, 2022-03-28, 10:15:36 07[LIB] <OPENBSD_GW|1> size of DH secret exponent: 4095 bits
Mon, 2022-03-28, 10:15:36 07[CFG] <OPENBSD_GW|1> configured proposals: IKE:AES_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/MODP_4096, IKE:AES_CBC_128/AES_CBC_192/AES_CBC_256/CAMELLIA_CBC_128/CAMELLIA_CBC_192/CAMELLIA_CBC_256/3DES_CBC/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/CURVE_25519/CURVE_448/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048, IKE:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256/CHACHA20_POLY1305/AES_GCM_12_128/AES_GCM_12_192/AES_GCM_12_256/AES_GCM_8_128/AES_GCM_8_192/AES_GCM_8_256/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/CURVE_25519/CURVE_448/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048
Mon, 2022-03-28, 10:15:36 07[CFG] <OPENBSD_GW|1> sending supported signature hash algorithms: sha256 sha384 sha512 identity
Mon, 2022-03-28, 10:15:36 07[ENC] <OPENBSD_GW|1> generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Mon, 2022-03-28, 10:15:36 07[NET] <OPENBSD_GW|1> sending packet: from 192.168.13.1[500] to 10.1.1.9[500] (1260 bytes)
Mon, 2022-03-28, 10:15:36 09[NET] <OPENBSD_GW|1> received packet: from 10.1.1.9[500] to 192.168.13.1[500] (702 bytes)
Mon, 2022-03-28, 10:15:36 09[ENC] <OPENBSD_GW|1> parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]
Mon, 2022-03-28, 10:15:36 09[IKE] <OPENBSD_GW|1> received SIGNATURE_HASH_ALGORITHMS notify
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1> selecting proposal:
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1>   no acceptable PSEUDO_RANDOM_FUNCTION found
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1> selecting proposal:
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1>   proposal matches
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1> received proposals: IKE:AES_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_256/MODP_4096
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1> configured proposals: IKE:AES_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_512/MODP_4096, IKE:AES_CBC_128/AES_CBC_192/AES_CBC_256/CAMELLIA_CBC_128/CAMELLIA_CBC_192/CAMELLIA_CBC_256/3DES_CBC/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/CURVE_25519/CURVE_448/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048, IKE:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256/CHACHA20_POLY1305/AES_GCM_12_128/AES_GCM_12_192/AES_GCM_12_256/AES_GCM_8_128/AES_GCM_8_192/AES_GCM_8_256/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/CURVE_25519/CURVE_448/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1> selected proposal: IKE:AES_CBC_256/HMAC_SHA2_512_256/PRF_HMAC_SHA2_256/MODP_4096
Mon, 2022-03-28, 10:15:36 09[CFG] <OPENBSD_GW|1> received supported signature hash algorithms: sha256 sha384 sha512
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1> local host is behind NAT, sending keep alives
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1> reinitiating already active tasks
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1>   IKE_CERT_PRE task
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1>   IKE_AUTH task
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1> authentication of 'swan.example.com' (myself) with pre-shared key
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1> successfully created shared key MAC
Mon, 2022-03-28, 10:15:37 09[CFG] <OPENBSD_GW|1> proposing traffic selectors for us:
Mon, 2022-03-28, 10:15:37 09[CFG] <OPENBSD_GW|1>  192.168.13.0/24
Mon, 2022-03-28, 10:15:37 09[CFG] <OPENBSD_GW|1> proposing traffic selectors for other:
Mon, 2022-03-28, 10:15:37 09[CFG] <OPENBSD_GW|1>  192.168.253.0/27
Mon, 2022-03-28, 10:15:37 09[CFG] <OPENBSD_GW|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_512_256/NO_EXT_SEQ, ESP:AES_CBC_128/AES_CBC_192/AES_CBC_256/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/NO_EXT_SEQ, ESP:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256
Mon, 2022-03-28, 10:15:37 09[IKE] <OPENBSD_GW|1> establishing CHILD_SA OPENBSD_GW{1}
Mon, 2022-03-28, 10:15:37 09[KNL] <OPENBSD_GW|1> got SPI c68371f2
Mon, 2022-03-28, 10:15:37 09[ENC] <OPENBSD_GW|1> generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_6_ADDR) N(ADD_6_ADDR) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Mon, 2022-03-28, 10:15:37 09[NET] <OPENBSD_GW|1> sending packet: from 192.168.13.1[4500] to 10.1.1.9[4500] (512 bytes)
Mon, 2022-03-28, 10:15:37 10[NET] <OPENBSD_GW|1> received packet: from 10.1.1.9[4500] to 192.168.13.1[4500] (240 bytes)
Mon, 2022-03-28, 10:15:37 10[ENC] <OPENBSD_GW|1> parsed IKE_AUTH response 1 [ IDr AUTH N(MOBIKE_SUP) SA TSi TSr ]
Mon, 2022-03-28, 10:15:37 10[IKE] <OPENBSD_GW|1> authentication of 'openbsd' with pre-shared key successful
Mon, 2022-03-28, 10:15:37 10[CFG] <OPENBSD_GW|1> constraint requires public key authentication, but pre-shared key was used
Mon, 2022-03-28, 10:15:37 10[CFG] <OPENBSD_GW|1> selected peer config 'OPENBSD_GW' unacceptable: constraint checking failed
Mon, 2022-03-28, 10:15:37 10[CFG] <OPENBSD_GW|1> no alternative config found
Mon, 2022-03-28, 10:15:37 10[ENC] <OPENBSD_GW|1> generating INFORMATIONAL request 2 [ N(AUTH_FAILED) ]
Mon, 2022-03-28, 10:15:37 10[NET] <OPENBSD_GW|1> sending packet: from 192.168.13.1[4500] to 10.1.1.9[4500] (96 bytes)
Mon, 2022-03-28, 10:15:37 10[CHD] <OPENBSD_GW|1> CHILD_SA OPENBSD_GW{1} state change: CREATED => DESTROYING
Mon, 2022-03-28, 10:15:37 10[KNL] <OPENBSD_GW|1> deleting SAD entry with SPI c68371f2
Mon, 2022-03-28, 10:15:37 10[KNL] <OPENBSD_GW|1> deleted SAD entry with SPI c68371f2
Mon, 2022-03-28, 10:15:37 10[IKE] <OPENBSD_GW|1> IKE_SA OPENBSD_GW[1] state change: CONNECTING => DESTROYING
Mon, 2022-03-28, 10:16:20 00[DMN] SIGINT received, shutting down