On Mon, 2013-02-04 at 16:04 +0000, David Woodhouse wrote: > Please try with the patch I just pushed to the openconnect git tree: > > http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/b0b4b34f > Thanks David, I did the following: $ git clone git://git.infradead.org/users/dwmw2/openconnect.git $ cd openconnect/ $ sudo apt-get build-dep openconnect $ sudo apt-get install libopenconnect-dev $ ./autogen.sh $ ./confgure $ make $ sudo make install $ openconnect --version OpenConnect version v4.07-90-gb37161f Using OpenSSL. Features present: TPM (OpenSSL ENGINE not present), DTLS $ openconnect --script=/etc/vpnc/vpnc-script remoteaccessvpn.nih.gov Attempting to connect to server 156.40.250.130:443 SSL negotiation with 156.40.250.130 Server certificate verify failed: unable to get local issuer certificate Certificate from VPN server "156.40.250.130" failed verification. Reason: unable to get local issuer certificate Enter 'yes' to accept, 'no' to abort; anything else to view: yes Connected to HTTPS on 156.40.250.130 POST https://156.40.250.130/ Got HTTP response: HTTP/1.0 302 Object Moved SSL negotiation with 156.40.250.130 Server certificate verify failed: unable to get local issuer certificate Connected to HTTPS on 156.40.250.130 GET https://156.40.250.130/+webvpn+/index.html Please enter your username and password. Username: XXXXX Password: POST https://156.40.250.130/+webvpn+/index.html Got CONNECT response: HTTP/1.1 200 OK CSTP connected. DPD 30, Keepalive 480 TUNSETIFF failed: Operation not permitted When I try to use the Network-Manager-openconnect GUI I get a segfault. Is there anything I did here that is wrong? When I cloned the git I looked at ssl.c and it seemed to be updated with the patches in http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/b0b4b34f. Maybe I need to do a reboot? Haven't done that yet. Hmm was just thinking maybe I missed the openssl-dev package. I'll need that too, right? I don't do much compiling/development, so let me know if I messed anything up here!
