/testing/guestbin/swan-prep --x509 --fips
Preparing X.509 files
Password changed successfully.
FIPS mode enabled.
east #
 ipsec start
Redirecting to: [initsystem]
east #
 ../../guestbin/wait-until-pluto-started
east #
 ipsec auto --add westnet-eastnet-ikev2
002 "westnet-eastnet-ikev2": added IKEv2 connection
east #
 echo "initdone"
initdone
east #
 grep "FIPS: rejecting" /tmp/pluto.log
"westnet-eastnet-ikev2" #1: FIPS: rejecting peer cert with key size 2032 under 2048: E=user-key2032@testing.libreswan.org,CN=key2032.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA
east #
 
