0

I'm trying to set up a vpn on my Ubuntu 18.04. I have a pfx file that is secured with a password. I generate a certificate and key in the following way:

For the certificate:

openssl pkcs12 -in my.pfx -nokeys -out publiccert.pem -nodes

For the key:

openssl pkcs12 -in my.pfx -nocerts -out privatekey.pem -nodes

In the vpn settings:

General:

VPN Protocol: Cisco AnyConnect

Gateway: [vpn.something.com]

User Certificate: publiccert.pem

Private Key: privatekey.pem

When I try turning on the vpn I get an error saying that the certificate failed to validate, no signer found. And when I type my username and password, it seems to turn on successfully but my ip address doesn't get changed.

I would appreciate any help. I'm just clueless....

EDIT:

I followed the link and tried running the command provided there, here is the output I got:

Got HTTP response: HTTP/1.1 307 Temporary Redirect Empty response from server Failed to obtain WebVPN cookie

16
  • 1
    You will need to sign the certificate, otherwise the client cannot accept it. Google for creating self signed certificate.
    – kukulo
    Feb 19, 2020 at 17:49
  • 2
    @kukulo if the VPN server just blindly accepts any locally generated certificate then there is a serious authentication problem... Feb 19, 2020 at 17:52
  • 1
    Who manages the VPN server? Ask them about which certificate to use, or to sign yours or to give you the needed certificate. You can not expect just using blindly any certificate, this has to be coordinated with the provider of the VPN. Feb 19, 2020 at 17:52
  • @kukulo well the pfx file was given me by the company I work in. Isn't it supposed to be signed?
    – Albert
    Feb 19, 2020 at 17:53
  • 2
    "they've given me a pfx file but didn't tell me how exactly to extract it. " and "I'm able to access some urls that I'm normally not, but some are inaccessible." You might have more problems in the future with this VPN setup than just the certificate handling. "The so called IT guy told me that he doesn't know how to do it on linux.." He could also have extracted the certificate and key for you, on his side... Feb 19, 2020 at 18:18

0

You must log in to answer this question.

Browse other questions tagged .