Anyconnect 3.1 on OS X Server Validation Problem

[Alex Passfall]

Hello,

After upgrading Anyconnect from 3.0.10057 to 3.1.03103, OS X clients can no longer connect.

They receive a warning that the server certificate is untrusted. However, the root certificates are correctly installed in the OS X keychain.

Funny thing is that it works if Firefox is installed and I guess its keystore is used.

Also, clients on other OSs work fine.

Anybody got any clues?

Kind regards,

Alex

[Brett Bajcsi]

Did you ever come up with a solution for this other than installing Firefox?  I ran the vpn cli interface and found that it was using the IP address of the server rather than the FQDN in order to compare versus the cert.  Obviously, this isn't going to work.