GlobalProtect-openconnect
GlobalProtect-openconnect copied to clipboard
yuezk
"Message did not meet security requirements"
Trying to use this software to connect to the Franklin and Marshall College VPN service. I installed your software and connected fine the first time. But now every subsequent time I cannot connect, and instead get the error message "Message did not meet security requirements."
Does it happen if you click on the tray icon, reset settings, and login again?
If I right click on the tray icon and select "Reset" then I can log in successfully!
This is a good work-around for me. Thank you! Please let me know what else (if anything) I can do to assist this project. :)
I've got to ask... how secure is it using third party VPN services like this, in general? I'd think there is a serious potential threat vector.
@yuezk this seems like a very handy tool, has it had third party security audits? If so, are the reports available anywhere for us to review?
I don't think so. I think having a wholesale third-party security audit is a separate (and much more comprehensive) issue
@arderyp how can I have the third-party security audits? Do you have any suggestions?
I've got to ask... how secure is it using third party VPN services like this, in general? I'd think there is a serious potential threat vector.
I would say you pretty much trust the VPN as much as you are trusting a public wifi…but then, you are using a VPN because you want some extra measure of security.
IIRC there is also some sort of probe feature that has openconnect execute some server-side code, but I would need to investigate that…
@arderyp To be honest, there is a related issue https://github.com/yuezk/GlobalProtect-openconnect/issues/114
I am not sure that is true. The issue in here sounds more like some special security "detection" a business would do. It possibly points to this service doing some caching it should not do? Whether this is up to the standard this repository should implement…I do not know.
Are you on good terms with the operator of the VPN service? Maybe contact them and ask them about the error message…
it also sounds like @koraa was offering here
Thank you for pinging me directly. My offer of a review was mostly for the issues I raised, but I am happy to help you do a quick assessment here, but a full security review is something I would need significant funding for.
Is there anything you are interested specifically?
