certificate validation failure cisco anyconnect

PS: On windows same steps worked, added cert by double clicking then launched cisco client, typed server, then he asked password to server I quess - and then I was connected. Server requested SSL client certificate none was configured Server certificate verify failed: certificate does not match hostname POST Attempting to connect to server :443 I accept - and same error Certificate validation failure, full log: Subject: C=RU,ST=,L=,O=,OU=IT,CN=vpn.ruĪlgorithm Security Level: Medium (2048 bits) Issuer: C=US,O=DigiCert Inc, OU=RSA CA 2018 Reason: certificate does not match hostname Private key (I think its domain.key, so chosen it)īut if tries to connect: Certificate from VPN server failed verification. User certificate (that is it? - didnt choose) UPD2: Tried to configure cisco anyconnect compatible with openconnect (which integrated to linux network center):ĬA certificate (it has to be domain.crt, so chosen it) ~/.cisco/certificates/client/private #Private keys ~/.cisco/certificates/client #Client certificates ~/.cisco/certificates/ca ~ #Trusted CA and root certificates: Placed all 4 of them in 3 different places: Openssl pkcs12 -in store.pfx -nocerts -out domain.pem -nodes I found this as about anyconnect, ikev2 remote access vpn and ASA: An圜onnect Over IKEv2 to ASA with AAA and Certificate Authentication - Cisco I think, if you do not create an anyconnect profile in xml, anyconnect will use sslvpn instead of ikev2 remote access vpn. Openssl pkcs12 -in store.pfx -out domain.crt -nodes -nokeys -cacerts Openssl pkcs12 -in store.pfx -nocerts -nodes -out domain.key Openssl pkcs12 -in store.pfx -clcerts -nokeys -out domain.cer This way I have extracted some certificates in different formats: Sudo cp /etc/ssl/certs/Global* /opt/.cisco/certificates/ca Then I launched cisco anyconnect secure mobile client typed where to connect - but cisco keep saying me that `Certificate validation failure` Then added `.pfx` certificates to `gnone2-key` storage. I have installed cisco anyconnect secure mobile client 2 (+all required packages).

Certificate validation failure cisco anyconnect