search

openconnect / openconnect-gui

MOVED TO https://gitlab.com/openconnect/openconnect-gui
https://gitlab.com/openconnect/openconnect-gui
GNU General Public License v2.0
1.29k stars 239 forks source link

1.0 breaks DTLS #35

Closed thoughtchad closed 9 years ago

thoughtchad commented 9 years ago

0.9 DTLS works: 2015-03-19 09:30 DTLS option X-DTLS-CipherSuite : AES128-SHA 2015-03-19 09:30 DTLS initialised. DPD 30, Keepalive 20 2015-03-19 09:30 Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)-(AES-128-CBC)-(SHA1).

1.0 DTLS breaks, and falls back to standard https: 2015-03-19 09:33 DTLS option X-DTLS-CipherSuite : AES128-SHA 2015-03-19 09:33 DTLS handshake failed: No supported cipher suites have been found. 2015-03-19 09:33 Error setting up DTLS

\ By the way - thanks for rolling this awesome windows OC client! **

timmay7 commented 9 years ago

I'm getting the same issue when trying to connect to my workplace. Version 0.9 worked just fine though.

I like the new addition of the tray icon. :)

nmav commented 9 years ago

Thanks. I had tested it only with ocserv which uses DTLS 1.2. It seems it was an issue in gnutls 3.4.0 and the cisco's DTLS. I'll try to make a bug fix release tomorrow.

https://gitlab.com/gnutls/gnutls/commit/048fd35c3b939cddcaccb8b8cc45c1709c8568d8

nmav commented 9 years ago

I've put an updated version at: http://people.redhat.com/nmavrogi/openconnect/openconnect-installer.exe

Please let me know if it fixes your issue and then I'll roll a release.

timmay7 commented 9 years ago

The updated version works for me! Just tried it.

thoughtchad commented 9 years ago

Thank You :-)