SSL Certificate verification bug

Marina Papoutsi marina.cogsci at gmail.com
Thu Oct 3 11:25:19 EDT 2013


Hi Kevin,

Actually it looks like the option --os linus is unnecessary.
I just tried without it and it works fine, so it doesn't seem to care.
The only thing that seems to matter is the wrapper.

Thanks,
M

On 03/10/13 16:15, Kevin Cernekee wrote:
> On Thu, Oct 3, 2013 at 7:50 AM, Marina Papoutsi <marina.cogsci at gmail.com> wrote:
>> Hi Kevin,
>>
>> Here is what I get:
>>
>> Invalid OS identity "android"
>>
>> FYI I'm using openconnect 5.01.
> Right, "--os android" is in my dev branch but it wasn't in v5.01.
>
> So currently your installation is reporting itself as a Linux host
> when it connects, but then CSD/hostscan is telling the server "sorry,
> CSD failed because I'm running Android."  Also, v5.01 doesn't send the
> new "X-AnyConnect-Identifier-*" mobile headers.
>
> I'm surprised this server does not complain about the discrepancy.




More information about the openconnect-devel mailing list