Can connect (maybe) but not access facilities

Stephen Davies sdavies at sdc.com.au
Thu May 19 21:33:54 PDT 2016


I am making my first attempt to use OpenConnect to access a remote VPN.
Here are the results of my attempt:
POST https://xxx

Attempting to connect to server xxxxxxxxxxxxx:443

p11-kit: coolkey: module failed to initialize, skipping: Internal error

SSL negotiation with xxx

Connected to HTTPS on xxx

Got HTTP response: HTTP/1.0 302 Temporary moved

GET https://xxx

Attempting to connect to server xxx

SSL negotiation with xxx

Connected to HTTPS on xxx

Got HTTP response: HTTP/1.0 302 Temporary moved

GET https://xxx

SSL negotiation with xxx

Connected to HTTPS on xxx

Please enter your username and password.

PASSCODE:

POST https://xxx

Failed to write to SSL socket: Error in the push function.

SSL negotiation with xxx

Connected to HTTPS on xxx

Got CONNECT response: HTTP/1.1 200 OK

CSTP connected. DPD 0, Keepalive 0

Connect Banner:

|  
| Please note that your activities may be monitored and logged.

|  


Connected tun1 as 10.98.134.73, using SSL

Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)
-(AES-256-CBC)-(SHA1).

At this point, my routing table looks liek this:
Kernel IP routing table

Destination     Gateway         Genmask         Flags   MSS Window 
 irtt Iface

0.0.0.0         0.0.0.0         0.0.0.0         U         0 0         
 0 tun1

0.0.0.0         203.2.199.97    0.0.0.0         UG        0 0         
 0 p2p1

10.55.66.0      10.55.66.2      255.255.255.0   UG        0 0         
 0 tun0

10.55.66.2      0.0.0.0         255.255.255.255 UH        0 0         
 0 tun0

10.98.134.72    0.0.0.0         255.255.255.248 U         0 0         
 0 tun1

203.2.199.0     0.0.0.0         255.255.255.0   U         0 0         
 0 p2p1

203.2.218.142   203.2.199.97    255.255.255.255 UGH       0 0         
 0 p2p1

where tun0 is my internal VPN and tun1 is the external VPN I want to
access.

Any attempt to ssh to 10.20.8.83 fails with no response.

I am obviously missing something but cannot see what.
Cheers and thanks,
Stephen




More information about the openconnect-devel mailing list