openconnect is using SSL instead of TLSv1.2 Protocol
Uwe Schreiber
uwe.h.schreiber at t-online.de
Sat Apr 4 01:22:58 PDT 2015
Hello,
i'am using Ubuntu 14.04.2 with all the latest patches.
I installed openconnect v7.06-7-gf2e8cd0 from GIT.
I am trying to connect to a Juniper VPN, but i receive the message
SSL connection failure: A TLS packet with unexpected length was
received.
I did a trace using Wireshark and have seen my client is sending a
"Client Hello" using SSL as protocol.
The VPN server is first responding by an ACK ... but immediately after
that the server is sending an ACK, RST.
I did a test using "openssl s_client connect:my-vpn.host:port"
This creates an "Client Hello" using TLSv1.2 and the handshaking between
my client and the VPN server is successful.
When i specify any other protocol within "openssl s_client" the behavior
is the same like using "openconnect --juniper my-vpn.host".
Is there a possibility to force openconnect using TLSv1.2 as protocol?
Regards
Uwe Schreiber
More information about the openconnect-devel
mailing list