VPN

From Han Wiki
Revision as of 11:57, 7 July 2020 by Mhan (talk | contribs) (remove redundant param)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Juniper Pulse Secure client

  • Last tested on CentOS 7.7.1908 (2020-04-22)

First, get the CA certificate file to get rid of the following error:

Server certificate verify failed: signer not found

echo -n | openssl s_client -connect vpn.myuniversity.edu:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/certs/myschool-vpn-cafile.crt

Then grab the --servercert sha256:whateverhexcodehere that shows up when you execute the following line:

$ sudo openconnect --authgroup=colleges --user=skan --cafile=/home/skan/certs/myschool-vpn-cafile.crt --juniper https://vpn.myuniversity.edu

Disconnect using ctrl-c and then add the --servercert param:

$ sudo openconnect --authgroup=colleges --user=skan --cafile=/home/skan/certs/myschool-vpn-cafile.crt --servercert sha256:043c3a132f34d87ba8c507f21d775a08dc1d85aa3f2d782996d66d17865af2e0 --juniper https://vpn.myuniversity.edu