0

I'm trying to set up a vpn on my Ubuntu 18.04. I have a pfx file that is secured with a password. I generate a certificate and key in the following way:

For the certificate:

openssl pkcs12 -in my.pfx -nokeys -out publiccert.pem -nodes

For the key:

openssl pkcs12 -in my.pfx -nocerts -out privatekey.pem -nodes

In the vpn settings:

General:

VPN Protocol: Cisco AnyConnect

Gateway: [vpn.something.com]

User Certificate: publiccert.pem

Private Key: privatekey.pem

When I try turning on the vpn I get an error saying that the certificate failed to validate, no signer found. And when I type my username and password, it seems to turn on successfully but my ip address doesn't get changed.

I would appreciate any help. I'm just clueless....

EDIT:

I followed the link and tried running the command provided there, here is the output I got:

Got HTTP response: HTTP/1.1 307 Temporary Redirect Empty response from server Failed to obtain WebVPN cookie

  • 1
    You will need to sign the certificate, otherwise the client cannot accept it. Google for creating self signed certificate. – kukulo Feb 19 at 17:49
  • 2
    @kukulo if the VPN server just blindly accepts any locally generated certificate then there is a serious authentication problem... – Patrick Mevzek Feb 19 at 17:52
  • 1
    Who manages the VPN server? Ask them about which certificate to use, or to sign yours or to give you the needed certificate. You can not expect just using blindly any certificate, this has to be coordinated with the provider of the VPN. – Patrick Mevzek Feb 19 at 17:52
  • @kukulo well the pfx file was given me by the company I work in. Isn't it supposed to be signed? – Albert Feb 19 at 17:53
  • 2
    "they've given me a pfx file but didn't tell me how exactly to extract it. " and "I'm able to access some urls that I'm normally not, but some are inaccessible." You might have more problems in the future with this VPN setup than just the certificate handling. "The so called IT guy told me that he doesn't know how to do it on linux.." He could also have extracted the certificate and key for you, on his side... – Patrick Mevzek Feb 19 at 18:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.