User certificate (that is it? - didnt choose) It asks to set: CA certificate (it has to be domain.crt, so chosen it) UPD2: Tried to configure cisco anyconnect compatible with openconnect (which integrated to linux network center): Trusted CA and root certificates ~/.cisco/certificates/clientĬlient certificates ~/.cisco/certificates/client/private Placed all 4 of them in 3 different places: ~/.cisco/certificates/ca ~ Openssl pkcs12 -in store.pfx -nocerts -out domain.pem -nodes Openssl pkcs12 -in store.pfx -out domain.crt -nodes -nokeys -cacerts Openssl pkcs12 -in store.pfx -nocerts -nodes -out domain.key This way I have extracted some certificates in different formats: openssl pkcs12 -in store.pfx -clcerts -nokeys -out domain.cer Tried this: sudo cp /etc/ssl/certs/Global* /opt/.cisco/certificates/ca Then I launched cisco anyconnect secure mobile client typed where to connect - but cisco keep saying me that Certificate validation failure I have installed cisco anyconnect secure mobile client 2 (+all required packages).
0 Comments
Leave a Reply. |