公司VPN的新证书，现在openconnect不起作用。
公司VPN的新证书，现在openconnect不起作用。
提问于 2018-09-21 21:34:52
因此，感谢工作中的“升级”，我们获得了一个新的VPN证书。它是自签名的，不再起作用了。这里是syslog：
openconnect[6002]: Connected to xxx:443
openconnect[6002]: SSL negotiation with xxx
openconnect[6002]: Server certificate verify failed: signer not found
openconnect[6002]: Connected to HTTPS on xxx
openconnect[6002]: Got CONNECT response: HTTP/1.1 200 OK
openconnect[6002]: CSTP connected. DPD 300, Keepalive 30
NetworkManager[1273]: Set up DTLS failed; using SSL instead
openconnect[6002]: Connected as 192.168.0.160, using SSL
openconnect[6002]: SIOCSIFMTU: Operation not permitted
NetworkManager[1273]: <info> [1537565026.6078] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",0]: VPN connection: (IP Config Get) reply received.
NetworkManager[1273]: <info> [1537565026.6106] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",7:(vpn0)]: VPN connection: (IP4 Config Get) reply received
NetworkManager[1273]: <warn> [1537565026.6107] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",7:(vpn0)]: invalid IP4 config received!
NetworkManager[1273]: <warn> [1537565026.6107] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",7:(vpn0)]: VPN connection: did not receive valid IP config information
NetworkManager[1273]: <info> [1537565026.6129] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",0]: VPN plugin: state changed: started (4)
NetworkManager[1273]: <info> [1537565026.6133] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",0]: VPN plugin: state changed: stopping (5)
NetworkManager[1273]: <info> [1537565026.6134] vpn-connection[0x55ab83c186c0,a0614dc2-f483-4dc9-87d4-7b9ac4169d31,"company",0]: VPN plugin: state changed: stopped (6)我看到签名者没有找到错误，但它移动到“无效的IP4配置接收！”这是怎么回事，我该怎么解决？
或者更好的是，告诉openconnect信任一个自我签名的证书。
回答 1
Ask Ubuntu用户
回答已采纳
发布于 2018-09-22 04:08:50
在连接时使用-servercert选项有一个解决办法：
在终端输入
sudo openconnect --protocol=gp <hostaddress>得到这样的信息：
Certificate from VPN server "serverhost" failed verification.
Reason: signer not found To trust this server in future, perhaps
add this to your command line: --servercert pin-sha256:serverfingerprint
Enter 'sì' to accept, 'no' to abort; anything else to view: 最后，在命令行选项中使用指纹：
openconnect --servercert=sha1:26cfbcdefg... [usual arguments] 或
openconnect --servercert=sha256:a8cfbcdedeadbeefdeadbeeffg... [usual arguments]页面原文内容由Ask Ubuntu提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://askubuntu.com/questions/1077360
复制相关文章
相似问题
腾讯云开发者
