testing: Converted sql to systemd

testing/tests/sql/ip-pool-db-expired/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db-expired/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db-expired/hosts/moon/etc/strongswan.conf

@@ -3,6 +3,14 @@
 charon {
   load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown sqlite sql attr-sql
 
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db-expired/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/ip-pool-db-expired/pretest.dat

@@ -5,12 +5,15 @@ moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 moon::ipsec pool --leases 2> /dev/null
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/ip-pool-db-restart/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db-restart/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db-restart/hosts/moon/etc/strongswan.conf

@@ -3,6 +3,14 @@
 charon {
   load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown sqlite sql attr-sql
 
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db-restart/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/ip-pool-db-restart/pretest.dat

@@ -5,12 +5,15 @@ moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 moon::ipsec pool --leases 2> /dev/null
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 dave::expect-connection home
 dave::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/ip-pool-db/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db/hosts/moon/etc/strongswan.conf

@@ -3,6 +3,14 @@
 charon {
   load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown sqlite sql attr-sql
 
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-pool-db/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/ip-pool-db/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/ip-split-pools-db-restart/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-split-pools-db-restart/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-split-pools-db-restart/hosts/moon/etc/strongswan.conf

@@ -3,6 +3,14 @@
 charon {
   load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown sqlite sql attr-sql
 
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-split-pools-db-restart/posttest.dat

@@ -1,5 +1,5 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl

testing/tests/sql/ip-split-pools-db-restart/pretest.dat

@@ -6,9 +6,12 @@ carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 moon::ipsec pool --status 2> /dev/null
 moon::ipsec pool --leases 2> /dev/null
-moon::service charon start 2> /dev/null
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
-carol::service charon start 2> /dev/null
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
-dave::service charon start 2> /dev/null
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::systemctl start strongswan-swanctl
+carol::systemctl start strongswan-swanctl
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 dave::expect-connection home
 dave::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/ip-split-pools-db/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-split-pools-db/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-split-pools-db/hosts/moon/etc/strongswan.conf

@@ -3,6 +3,14 @@
 charon {
   load = random nonce aes sha1 sha2 pem pkcs1 gmp x509 curl revocation hmac vici kernel-netlink socket-default updown sqlite sql attr-sql
 
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/ip-split-pools-db/posttest.dat

@@ -1,5 +1,5 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl

testing/tests/sql/ip-split-pools-db/pretest.dat

@@ -5,9 +5,12 @@ moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 moon::ipsec pool --status 2> /dev/null
-moon::service charon start 2> /dev/null
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
-carol::service charon start 2> /dev/null
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
-dave::service charon start 2> /dev/null
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::systemctl start strongswan-swanctl
+carol::systemctl start strongswan-swanctl
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/multi-level-ca/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/multi-level-ca/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/multi-level-ca/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/multi-level-ca/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/multi-level-ca/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/net2net-cert/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-cert/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-cert/posttest.dat

@@ -1,4 +1,4 @@
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
-sun::service charon stop 2> /dev/null
+sun::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 sun::iptables-restore < /etc/iptables.flush

testing/tests/sql/net2net-cert/pretest.dat

@@ -2,10 +2,12 @@ moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 sun::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipsec.d/data.sql > /etc/db.d/ipsec.sql
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 sun::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+sun::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 sun::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-sun::service charon start 2> /dev/null
+sun::systemctl start strongswan-swanctl
-moon::expect-connection net-net 
+moon::expect-connection net-net
 sun::expect-connection net-net
 moon::swanctl --initiate --child net-net 2> /dev/null

testing/tests/sql/net2net-psk/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-psk/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-psk/posttest.dat

@@ -1,4 +1,4 @@
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
-sun::service charon stop 2> /dev/null
+sun::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 sun::iptables-restore < /etc/iptables.flush

testing/tests/sql/net2net-psk/pretest.dat

@@ -2,10 +2,12 @@ moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 sun::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipsec.d/data.sql > /etc/db.d/ipsec.sql
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 sun::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+sun::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 sun::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-sun::service charon start 2> /dev/null
+sun::systemctl start strongswan-swanctl
-moon::expect-connection net-net 
+moon::expect-connection net-net
 sun::expect-connection net-net
 moon::swanctl --initiate --child net-net 2> /dev/null

testing/tests/sql/net2net-route-pem/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-route-pem/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-route-pem/posttest.dat

@@ -1,4 +1,4 @@
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
-sun::service charon stop 2> /dev/null
+sun::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 sun::iptables-restore < /etc/iptables.flush

testing/tests/sql/net2net-route-pem/pretest.dat

@@ -2,10 +2,12 @@ moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 sun::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipsec.d/data.sql > /etc/db.d/ipsec.sql
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 sun::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+sun::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 sun::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-sun::service charon start 2> /dev/null
+sun::systemctl start strongswan-swanctl
 moon::expect-connection net-net
 alice::ping -c 1 -W 1 10.2.0.10
 bob::ping -c 1 -W 1 10.1.0.20

testing/tests/sql/net2net-start-pem/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-start-pem/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/net2net-start-pem/posttest.dat

@@ -1,4 +1,4 @@
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
-sun::service charon stop 2> /dev/null
+sun::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 sun::iptables-restore < /etc/iptables.flush

testing/tests/sql/net2net-start-pem/pretest.dat

@@ -2,10 +2,12 @@ moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 sun::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipsec.d/data.sql > /etc/db.d/ipsec.sql
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 sun::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+sun::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 sun::iptables-restore < /etc/iptables.rules
-sun::service charon start 2> /dev/null
+sun::systemctl start strongswan-swanctl
 sun::expect-connection net-net
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-moon::sleep 4 
+moon::sleep 4
 

testing/tests/sql/rw-cert/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-cert/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-cert/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-cert/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-cert/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-eap-aka-rsa/posttest.dat

@@ -1,5 +1,5 @@
 carol::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-eap-aka-rsa/pretest.dat

@@ -2,10 +2,12 @@ moon::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 carol::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipsec.d/data.sql > /etc/db.d/ipsec.sql
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
 moon::expect-connection rw-eap-aka
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/rw-psk-ipv4/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-ipv4/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-ipv4/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-ipv4/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-psk-ipv4/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/rw-psk-ipv6/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-ipv6/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-ipv6/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-ipv6/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-psk-ipv6/pretest.dat

@@ -4,6 +4,9 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
@@ -13,9 +16,9 @@ dave::ip6tables-restore < /etc/ip6tables.rules
 alice::"ip route add fec0:\:/16 via fec1:\:1"
 carol::"ip route add fec1:\:/16 via fec0:\:1"
 dave::"ip route add fec1:\:/16 via fec0:\:1"
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/rw-psk-rsa-split/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-rsa-split/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-rsa-split/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-psk-rsa-split/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-psk-rsa-split/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/rw-rsa-keyid/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-rsa-keyid/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-rsa-keyid/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-rsa-keyid/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-rsa-keyid/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/rw-rsa/hosts/carol/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-rsa/hosts/dave/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-rsa/hosts/moon/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/rw-rsa/posttest.dat

@@ -1,8 +1,8 @@
 carol::swanctl --terminate --ike home
 dave::swanctl --terminate --ike home
-carol::service charon stop 2> /dev/null
+carol::systemctl stop strongswan-swanctl
-dave::service charon stop 2> /dev/null
+dave::systemctl stop strongswan-swanctl
-moon::service charon stop 2> /dev/null
+moon::systemctl stop strongswan-swanctl
 moon::iptables-restore < /etc/iptables.flush
 carol::iptables-restore < /etc/iptables.flush
 dave::iptables-restore < /etc/iptables.flush

testing/tests/sql/rw-rsa/pretest.dat

@@ -4,12 +4,15 @@ dave::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ips
 moon::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 carol::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 dave::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+carol::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+dave::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+moon::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 moon::iptables-restore < /etc/iptables.rules
 carol::iptables-restore < /etc/iptables.rules
 dave::iptables-restore < /etc/iptables.rules
-moon::service charon start 2> /dev/null
+moon::systemctl start strongswan-swanctl
-carol::service charon start 2> /dev/null
+carol::systemctl start strongswan-swanctl
-dave::service charon start 2> /dev/null
+dave::systemctl start strongswan-swanctl
 moon::expect-connection rw
 carol::expect-connection home
 carol::swanctl --initiate --child home 2> /dev/null

testing/tests/sql/shunt-policies-nat-rw/hosts/alice/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/shunt-policies-nat-rw/hosts/sun/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/shunt-policies-nat-rw/hosts/venus/etc/strongswan.conf

@@ -1,6 +1,14 @@
 # /etc/strongswan.conf - strongSwan configuration file
 
 charon {
+  syslog {
+    daemon {
+      default = 1
+    }
+    auth {
+      default = 0
+    }
+  }
   plugins {
     sql {
       database = sqlite:///etc/db.d/ipsec.db

testing/tests/sql/shunt-policies-nat-rw/posttest.dat

@@ -1,5 +1,5 @@
-alice::service charon stop 2> /dev/null
+alice::systemctl stop strongswan-swanctl
-venus::service charon stop 2> /dev/null
+venus::systemctl stop strongswan-swanctl
-sun::service charon stop 2> /dev/null
+sun::systemctl stop strongswan-swanctl
 sun::iptables-restore < /etc/iptables.flush
 moon::iptables -t nat -F

testing/tests/sql/shunt-policies-nat-rw/pretest.dat

@@ -4,12 +4,15 @@ sun::cat /usr/local/share/strongswan/templates/database/sql/sqlite.sql /etc/ipse
 alice::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 venus::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
 sun::cat /etc/db.d/ipsec.sql | sqlite3 /etc/db.d/ipsec.db
+alice::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+venus::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
+sun::cd /etc/swanctl; rm -r rsa/* x509/* x509ca/*
 sun::iptables-restore < /etc/iptables.rules
 moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p udp -j SNAT --to-source PH_IP_MOON:1024-1100
 moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p tcp -j SNAT --to-source PH_IP_MOON:2000-2100
-sun::service charon start 2> /dev/null
+sun::systemctl start strongswan-swanctl
-alice::service charon start 2> /dev/null
+alice::systemctl start strongswan-swanctl
-venus::service charon start 2> /dev/null
+venus::systemctl start strongswan-swanctl
 sun::expect-connection nat-t
 alice::expect-connection nat-t
 alice::swanctl --initiate --child nat-t 2> /dev/null