Hi there!
I was using ocserv 0.9.1 with uesrname and password. However, when
using a self-signed certificate (But GlobalSign is OK), it has been
such a error message: GnuTLS error (at worker-vpn.c:349): The TLS
connection was non-properly terminated. (The client was Cisco
AnyConnect Secure Mobility Client for Windows 3.0.3054)
But I was change the client to OpenConnect as normal.
My OS in used is CentOS 6 64bit.
nettle-2.7.1
unbound-1.4.22
gnutls-3.3.9
Could you help me with this issue?
Thanks a lot !
Waiting for your reply.
My Config:
default-domain = "vpn.xxx.com"
auth = "plain[/usr/local/ocserv/passwd]"
max-clients = 0
max-same-clients = 1
tcp-port = 443
udp-port = 443
listen-clear-file = /var/run/ocserv-conn.socket
keepalive = 32400
dpd = 90
idle-timeout = 300
mobile-idle-timeout = 300
isolate-workers = false
try-mtu-discovery = false
server-cert = /usr/local/ocserv/keys/server.cer
server-key = /usr/local/ocserv/keys/server.key
tls-priorities = "NORMAL:%SERVER_PRECEDENCE:%COMPAT:-VERS-SSL3.0:-ARCFOUR-128"
always-require-cert = false
auth-timeout = 40
cookie-timeout = 300
deny-roaming = false
rekey-time = 172800
rekey-method = ssl
use-utmp = true
use-occtl = true
pid-file = /var/run/ocserv.pid
socket-file = /var/run/ocserv-socket
run-as-user = nobody
run-as-group = daemon
device = vpns
predictable-ips = true
ipv4-network = 192.168.252.0
ipv4-netmask = 255.255.255.0
ping-leases = false
cisco-client-compat = true
route = 8.0.0.0/255.0.0.0
