Can´t get a cert-based IPSec-VPN with Linux working . (Mac and Win work fine with the same certs.)
Somethings seems to be wrong with CertStore.
From syslog:
CNSSCertStore File: Certificates/NSSCertStore.cpp Line: 72 Invoked Function: CNSSCertUtils::InitNSS Return Code: -31391733 (0xFE21000B) Description: CERTSTORE_ERROR_PROVIDER_ERROR
I used Firefox 13.0.1 and checked the certificate. It´s valid and it´s there.
Webinstall does not work - A profile is missing.
AnyConnect Pre-Deployment on Linux is broken. (CSCts51839)
vpnsetup.sh can be downloaded via webbroser. The script works and the vpnagentd is there.
The anyconnect GUI cannot initiate the VPN because "The following Certificate received from the Server [the ASA] could not be verified..."
(The same certificate is acknowledged as valid when I try a Win or Mac-computer.)
When I try a webinstall after running the vpnsetup.sh script I get a "Connection Established" but I cannot ping.
The message
"The following Certificate received from the Server [the ASA] could not be verified..." reemerges every minute or so.
The AnyConnect version is: 3.0.08057 ; ASA 8.4(2)8
Any ideas on how to fix the certstore problem ?
Andreas
