search

theinvisible / openfortigui

VPN-GUI to connect to Fortigate-Hardware, based on openfortivpn
https://hadler.me/linux/openfortigui/
GNU General Public License v3.0
489 stars 54 forks source link

GUI not prompting to add a trusted cert #116

Closed A-damW closed 4 years ago

A-damW commented 4 years ago

New installation of: openfortigui_0.9.0-2_amd64_focal.deb New installation of: Lubuntu 20.04 (In live persistence mode)

Fails immediately upon trying to connect to a known good FortiGate account.

looking at the debug logs suggest that I manually add a trusted cert digest to my config file.

DEBUG: Gateway certificate validation failed. ERROR: Gateway certificate validation failed, and the certificate digest is not in the local whitelist. If you trust it, rerun with: ERROR: --trusted-cert ba92b71004e9c0459dbb54c60c3fa8a13789d18b6cd614a546c4c52856dc7386 ERROR: or add this line to your config file: ERROR: trusted-cert = ba92b71004e9c0459dbb54c60c3fa8a13789d18b6cd614a546c4c52856dc7386

Upon copy/pasting the above cert digest into openfortigui, I successfully connect.

Previous versions of openfortigui have prompted to add the trusted cert upon attempting to connect.

theinvisible commented 4 years ago

Thanks for your report. There was a typo fixed in openfortivpn so the detection failed. Should work now again with 0.9.0-3 release

A-damW commented 4 years ago

I can confirm the gui now prompts to add a cert with 0.9.0-3 release.