A transport connection between the hosts moon and sun is set up. The host moon starts the Trusted Key Manager (TKM) and the Ada XFRM proxy, which relays XFRM kernel messages to charon. The authentication is based on X.509 certificates. The connection is initiated by a ping from moon to sun. The test asserts that a rekeying initiated by sun works as expected.