Thank you Lubomir! I?ll try these hints. Kind regards, Henry > 20 aug. 2018 kl. 16:59 skrev ?ubom?r Carik <lubomir.carik at gmail.com>: > > Looks like the certificate for 'vpn.virt.hermods.se' site has expired > in October 2017 and your system block that site. Systems and browsers > gets more strictly with invalid certificates. > You should contact the admin of that VPN server and ask for certificate re-sign. > > Or, as workaround, you can try to find this certificate in your > keychain app on macOS and remove them and re-create profile in > openconnect-gui > Or, explicitly set to trust it (I don't recommend the hint, it is > security risk!! - but check on your colleagues windows machine the > trust-state of above certificate site) > > Best Regards, > Lubomir. > > po 20. 8. 2018 o 16:36 Henry Str?msten <henry.stromsten at corfima.se> nap?sal(a): >> >> Hello Lubomir, >> >> Thank you for your prompt reply. >> >> It worked after upgrade (to 10.13.6) and broke after som time. >> >> I do not get CISCO SSL VPN Service. My colleague on a Windows client gets it, though. >> >> I get ?Firefox kan inte uppr?tta en anslutning till servern p? 192.36.199.162.? = "Firefox cannot establish a connection to the server 192.36.199.162.? >> >> I have also tried switching off the firewall. No difference. >> >> When I run Openconnect there is no difference between versions 1.5.2 and 1.5.3. I do not get to the point where I read: >> >> "You are connecting for the first time to this peer.\n" >> "You have no guarantee that the server is the computer you think it is.\n\n" >> "If the information provided bellow is valid and you trust this host, " >> "hit 'Accurate information' to remember it and to carry on connecting.\n" >> "If you do not trust this host, hit Cancel to abandon the connection." >> >> The times when installation worked, I passed via a box containing the text above. I found it and I have copied it from vpninfo.cpp. >> >> Thanks for any help. >> >> Kind regards, >> >> Henry >> >> >>>> 20 aug. 2018 kl. 15:51 skrev ?ubom?r Carik <lubomir.carik at gmail.com>: >>>> >>>> Hello Henry, >>>> >>>> I tried already a gui and console versions with mentioned url and I >>>> received group/user/password challenges. >>>> Did you upgrade the system and app stop working? Or it works after >>>> upgrade and it breaks after some time? >>>> May be check: >>>> - exists any profile for this IP address? if yes, please try remove them >>>> - when you put above https url into your web browser do you get "CISCO >>>> SSL VPN Service" page? >>>> >>>> Best Regards, >>>> Lubomir Carik >>>> >>>> po 20. 8. 2018 o 15:15 Henry Str?msten <henry.stromsten at corfima.se> nap?sal(a): >>>>> >>>>> Dear Madams, Dear Sirs, >>>>> >>>>> I hope this message will find you well. >>>>> >>>>> I have been using Openconnect 1.5.2 for some months on a MACBook PRO running on (now) High Sierra, 10.13.6. Suddenly the program stopped working. >>>>> >>>>> I have tried to re-install both versions 1.5.2 and 1.5.3 but I don?t get further than ?Save and Connect? after creating a ?New profile?. >>>>> >>>>> The log says: >>>>> >>>>> 2018-08-20 15:08:49 | 7fff93d26380 | OpenConnect-GUI VPN client (1.5.3) logging started? >>>>> 2018-08-20 15:09:16 | 700000dc4000 | POST https://192.36.199.162/ >>>>> 2018-08-20 15:09:16 | 700000dc4000 | Attempting to connect to server 192.36.199.162:443 >>>>> 2018-08-20 15:09:16 | 700000dc4000 | Failed to connect to 192.36.199.162:443: Can't assign requested address >>>>> 2018-08-20 15:09:16 | 700000dc4000 | Failed to connect to host 192.36.199.162 >>>>> 2018-08-20 15:09:16 | 700000dc4000 | Failed to open HTTPS connection to 192.36.199.162 >>>>> 2018-08-20 15:09:16 | 700000dc4000 | Authentication error; cannot obtain cookie >>>>> 2018-08-20 15:09:16 | 7fff93d26380 | Disconnected >>>>> >>>>> Is this a cookie problem? No browser is involved. >>>>> >>>>> Please, what shall I do? >>>>> >>>>> Kind regards, >>>>> >>>>> Henry Str?msten >>>>> Malm?, Sweden >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> openconnect-devel mailing list >>>>> openconnect-devel at lists.infradead.org >>>>> http://lists.infradead.org/mailman/listinfo/openconnect-devel >>> >>
