Dimitri Papadopoulos Orfanos

It could be that VPN SSL has issues that VPN IPSec does not have on this Fortinet appliance. It would be interesting to compare SSL and IPSec from a Windows...

Interesting, then it would be worth closing mail clients and other usual suspects. If it doesn't help, inspecting the network traffic with _Wireshark_ might give a clue.

Do you expect to reach these specific subnets through the VPN tunnel or different routes? Said differently, are the 10.55.0.0 and 10.56.0.0 private networks behind the VPN gateway?

I suspect these networks are simply not reachable from the VPN gateway because of firewalls and other network filtering, on purpose or not. Are you supposed to be able to...

What do you mean exactly by "more or less the exact same setup" and "alternative openvpn tunnel"? I understand that whatever the client (_openfortivpn_ or _FortiClient_) you are unable to...

Could it be a DNS problem instead of a routing problem? Are you perhaps able to reach servers on these networks by IP address, but not by DNS name?

Unfortunately I don't have a mac to test. If you can test and provide a small patch, I'm happy to merge it. Other alternative: Do not call `pinentry_read_password()` from `read_password()`...

> With the former, I mean that we both have the same macbook pro with no special routing configuration. I can see why you suspect this is related to the...

Also note that we call fork() / execv() to run _pppd_: `execv("/usr/sbin/pppd", ...)` https://github.com/adrienverge/openfortivpn/blob/0cc44fd/src/tunnel.c#L277 That's a different use case though.

popen() is usually seen as the standard way to run an external command. You can read error messages output by the external command and have _openfortivpn_ show these error messages...