GlobalProtect-openconnect icon indicating copy to clipboard operation
GlobalProtect-openconnect copied to clipboard

Not working on Ubuntu 22.04 LTS

Open javiertello opened this issue 2 years ago • 10 comments

Hi,

With Ubuntu 20.04 it worked properly, but after update to 22.04 I get when I try to connect:

"TLS initialization failed"

I use Openconnect 8.1.

javiertello avatar Jan 31 '23 14:01 javiertello

Does #142 work for you?

yuezk avatar Feb 01 '23 03:02 yuezk

Not working for me, same message. Also tested with Openconnect 8.20-1:

2023-02-01 09:53:46.724 INFO [20534] [GatewayAuthenticator::doAuth@81] Perform the gateway prelogin at https://xxxxxxxxxxxx/ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Linux qt.network.ssl: QSslSocket::connectToHostEncrypted: TLS initialization failed 2023-02-01 09:53:46.725 ERROR [20534] [GatewayAuthenticator::onPreloginFinished@92] Failed to prelogin the gateway at https://xxxxxxxxxxxxxxxxx/ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Linux, TLS initialization failed

javiertello avatar Feb 01 '23 08:02 javiertello

I have also tried with gp-saml-gui, and I get this response:

Unacceptable TLS certificate

javiertello avatar Feb 01 '23 10:02 javiertello

Is there a screenshot for this?

yuezk avatar Feb 02 '23 06:02 yuezk

imagen

imagen

javiertello avatar Feb 02 '23 07:02 javiertello

Have you ever tried this?

sudo apt install --reinstall ca-certificates

yuezk avatar Feb 02 '23 08:02 yuezk

Reinstalling ca-certificates did not work. When I execute gp-saml-gui with --no-verify option it works!!

More info here https://github.com/dlenski/gp-saml-gui/issues/10

There is a way to pass this option to gpclient?

javiertello avatar Feb 02 '23 08:02 javiertello

I'm afraid it doesn't have this option.

BTW, does it raise a certificate error if you open your VPN portal from your browser?

yuezk avatar Feb 02 '23 09:02 yuezk

I can access to the VPN portal from Firefox successfully.

javiertello avatar Feb 02 '23 09:02 javiertello

A clean installation of KDE Neon based on Ubuntu 22.04 works flawlessly.

DavidPerezIngeniero avatar Feb 06 '23 07:02 DavidPerezIngeniero

Should no longer be a problem in 2.x, which has an option to ignore the TLS errors, Closing it for now, reopen it if not fixed.

yuezk avatar Mar 23 '24 13:03 yuezk