Marco Cocco commented on issue #42 at OpenConnect VPN projects / OpenConnect

Marco Cocco
2019-11-08T15:09:31Z

hi, I have the same problem more or less. I'm on a linux environment:

SMP Debian 4.9.110-3+deb9u6 (2018-10-08) x86_64 GNU/Linux

and Openconnect version:

OpenConnect version v8.05-73-gf91b42b8

Which is at the moment the last git clone from official repo.

I'm able to steal an actual connection obtained via Windows\PulseVPN client since after my Linux attempt, my Windows desktop shows the tipycal pop-up reporting that current connection was turned down.

Strange thing If you think that the linux command shows:

Got HTTP response: HTTP/1.1 200 OK
Content-type: application/octet-stream
Pragma: no-cache
NCP-Version: 3
Set-Cookie: DSLastAccess=1573225580; path=/; Secure
Connection: close
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
> 0000: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |.........xxxxxx|
> 0010: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |xxxxx......|
Server response to hostname packet is error 0x08
Creating SSL connection failed

I can share my full http dump if needed but not in official way. Tried tons of time different attempts but this is the most advanced result. This is my actual command:

./openconnect --juniper --dump-http-traffic -u <USER> -i tun1 --useragent 'Mozilla/5.0 (Linux) Firefox' --csd-wrapper=tncc.py --os linux https://webvpn.mycompany.com/myenvtest/

Thanks