Looks like the certificate for 'vpn.virt.hermods.se' site has expired in October 2017 and your system block that site. Systems and browsers gets more strictly with invalid certificates. You should contact the admin of that VPN server and ask for certificate re-sign.
Or, as workaround, you can try to find this certificate in your keychain app on macOS and remove them and re-create profile in openconnect-gui Or, explicitly set to trust it (I don't recommend the hint, it is security risk!! - but check on your colleagues windows machine the trust-state of above certificate site) Best Regards, Lubomir. po 20. 8. 2018 o 16:36 Henry Strömsten <[email protected]> napísal(a): > > Hello Lubomir, > > Thank you for your prompt reply. > > It worked after upgrade (to 10.13.6) and broke after som time. > > I do not get CISCO SSL VPN Service. My colleague on a Windows client gets it, > though. > > I get ”Firefox kan inte upprätta en anslutning till servern på > 192.36.199.162.” = "Firefox cannot establish a connection to the server > 192.36.199.162.” > > I have also tried switching off the firewall. No difference. > > When I run Openconnect there is no difference between versions 1.5.2 and > 1.5.3. I do not get to the point where I read: > > "You are connecting for the first time to this peer.\n" > "You have no guarantee that the server is the computer you think it is.\n\n" > "If the information provided bellow is valid and you trust this host, " > "hit 'Accurate information' to remember it and to carry on connecting.\n" > "If you do not trust this host, hit Cancel to abandon the connection." > > The times when installation worked, I passed via a box containing the text > above. I found it and I have copied it from vpninfo.cpp. > > Thanks for any help. > > Kind regards, > > Henry > > > >> 20 aug. 2018 kl. 15:51 skrev Ľubomír Carik <[email protected]>: > >> > >> Hello Henry, > >> > >> I tried already a gui and console versions with mentioned url and I > >> received group/user/password challenges. > >> Did you upgrade the system and app stop working? Or it works after > >> upgrade and it breaks after some time? > >> May be check: > >> - exists any profile for this IP address? if yes, please try remove them > >> - when you put above https url into your web browser do you get "CISCO > >> SSL VPN Service" page? > >> > >> Best Regards, > >> Lubomir Carik > >> > >> po 20. 8. 2018 o 15:15 Henry Strömsten <[email protected]> > >> napísal(a): > >>> > >>> Dear Madams, Dear Sirs, > >>> > >>> I hope this message will find you well. > >>> > >>> I have been using Openconnect 1.5.2 for some months on a MACBook PRO > >>> running on (now) High Sierra, 10.13.6. Suddenly the program stopped > >>> working. > >>> > >>> I have tried to re-install both versions 1.5.2 and 1.5.3 but I don’t get > >>> further than ”Save and Connect” after creating a ”New profile”. > >>> > >>> The log says: > >>> > >>> 2018-08-20 15:08:49 | 7fff93d26380 | OpenConnect-GUI VPN client (1.5.3) > >>> logging started… > >>> 2018-08-20 15:09:16 | 700000dc4000 | POST https://192.36.199.162/ > >>> 2018-08-20 15:09:16 | 700000dc4000 | Attempting to connect to server > >>> 192.36.199.162:443 > >>> 2018-08-20 15:09:16 | 700000dc4000 | Failed to connect to > >>> 192.36.199.162:443: Can't assign requested address > >>> 2018-08-20 15:09:16 | 700000dc4000 | Failed to connect to host > >>> 192.36.199.162 > >>> 2018-08-20 15:09:16 | 700000dc4000 | Failed to open HTTPS connection to > >>> 192.36.199.162 > >>> 2018-08-20 15:09:16 | 700000dc4000 | Authentication error; cannot obtain > >>> cookie > >>> 2018-08-20 15:09:16 | 7fff93d26380 | Disconnected > >>> > >>> Is this a cookie problem? No browser is involved. > >>> > >>> Please, what shall I do? > >>> > >>> Kind regards, > >>> > >>> Henry Strömsten > >>> Malmö, Sweden > >>> > >>> > >>> > >>> _______________________________________________ > >>> openconnect-devel mailing list > >>> [email protected] > >>> http://lists.infradead.org/mailman/listinfo/openconnect-devel > > > _______________________________________________ openconnect-devel mailing list [email protected] http://lists.infradead.org/mailman/listinfo/openconnect-devel
