Anyconnect Linux

Question

Can´t get a cert-based IPSec-VPN with Linux working . (Mac and Win work fine with the same certs.)
Somethings seems to be wrong with CertStore.
From syslog:
CNSSCertStore File: Certificates/NSSCertStore.cpp Line: 72 Invoked Function: CNSSCertUtils::InitNSS Return Code: -31391733 (0xFE21000B) Description: CERTSTORE_ERROR_PROVIDER_ERROR
I used Firefox 13.0.1 and checked the certificate. It´s valid and it´s there.
Webinstall does not work - A profile is missing.
AnyConnect Pre-Deployment on Linux is broken.  (CSCts51839)
vpnsetup.sh can be downloaded via webbroser. The script works and the vpnagentd is there.
The anyconnect GUI cannot initiate the VPN because "The following Certificate received from the Server [the ASA] could not be verified..."
(The same certificate is acknowledged as valid when I try a Win or Mac-computer.)
When I try a webinstall after running the vpnsetup.sh script I get a "Connection Established" but I cannot ping.
The message
"The following Certificate received from the Server [the ASA] could not be verified..." reemerges every minute or so.
The AnyConnect version is: 3.0.08057  ; ASA 8.4(2)8
Any ideas on how to fix the certstore problem ?
Andreas

Answer 1

Hi,
thanks for the reply. I have tried openconnect as well, but no luck. I am using ubuntu 64-bit.
Even before I can provide any credentials, openconnect gives me an error
Got HTTP response: HTTP/1.1 404 Not Found (does not exist)
Cannot receive HTTP 1.0 body without closing connection
I've found this error mentioned in many posts, but can't quite understand how to solve this.
If I try to re-connect again, it will then crash and if I try to reconnect straight after, it will bring up the login screen, but it still doesn't allow me to connect saying something like the agent does not meet the security requirements of the server (something like that anyway).
Why can't cisco make a linux 64-bit client that works ... ?
Many thanks for your help
M