GlobalProtect-openconnect
GlobalProtect-openconnect copied to clipboard
SSL connection fails
I'm using 1.4.8+2snapshot.g0adeaf9 on Ubuntu 20.04 and it was working well until August 1. (The date makes me suspect a server-side change that is causing the failure.) Now I get an SSL error when I attempt to connect:
2022-08-03 07:33:59.687 INFO [102183] [GPClient::onGatewaySuccess@383] Gateway login succeeded, got the
cookie authcookie=xxxd&portal=vpn-connect-nit-gateway-Nxxx
2022-08-03 07:33:59.701 INFO [102183] [GPClient::onVPNLogAvailable@509] Output of `openconnect --version`:
OpenConnect version v8.10-170-gca7bc365
Using GnuTLS 3.6.13. Features present: PKCS#11, HOTP software token, TOTP software token, System keys, DTLS, ESP
Supported protocols: anyconnect (default), nc, gp, pulse
2022-08-03 08:06:15.240 INFO [102183] [GPClient::onVPNLogAvailable@509] Got extra OpenConnect args
for server: xxx, <empty>
2022-08-03 08:06:15.240 INFO [102183] [GPClient::onVPNLogAvailable@509] Start process with
arugments: --protocol=gp, -u, , --cookie-on-stdin, xxx
2022-08-03 08:06:15.240 INFO [102183] [GPClient::onVPNLogAvailable@509] Openconnect started successfully, PID=105584
2022-08-03 08:06:15.245 INFO [102183] [GPClient::onVPNLogAvailable@509] POST https://xxx/ssl-vpn/getconfig.esp
2022-08-03 08:06:15.312 INFO [102183] [GPClient::onVPNLogAvailable@509] Connected to yyy.yyy.yyy.yyy:443
2022-08-03 08:06:15.324 INFO [102183] [GPClient::onVPNLogAvailable@509] SSL negotiation with xxx
2022-08-03 08:06:15.392 INFO [102183] [GPClient::onVPNLogAvailable@509] Connected to HTTPS on xxx with
ciphersuite (TLS1.2)-(RSA)-(AES-256-GCM)
2022-08-03 08:06:15.431 INFO [102183] [GPClient::onVPNLogAvailable@509] Matching client config not found
Creating SSL connection failed
Unknown error; exiting.
2022-08-03 08:06:15.435 INFO [102183] [GPClient::onVPNLogAvailable@509] Openconnect process exited with
code 1 and exit status NormalExit
Here is a similar problem #96. You could try https://github.com/dlenski/gp-saml-gui to see if it works for you.
I couldn't get gp-saml-gui
to work. I finally fixed the issue by upgrading from Ubuntu 20.04 to 22.04, which upgraded openconnect from 8.10 to 8.20. (I assume the openconnect upgrade is what worked.)