As of version 7.08, OpenConnect has removed the "--no-cert-check" option [1]. So now I need to provide a certificate file (in the "AC certificate file" field) to connect to my OpenConnect server. When I use plasma-nm applet, connection timed out. If I start nm-applet in parallel and try to connect from there (using the same configuration), connection is established. I can even connect from plasma-nm if nm-applet is active in parallel, but if I close nm-applet an try to connect from plasma-nm, connection timed out. [1] http://www.infradead.org/openconnect/changelog.html
Is there anything relevant in NetworkManager log?
Relevant content on /var/log/syslog: Jun 7 11:24:13 christian-Inspiron-3459 NetworkManager[1274]: <info> [1496849053.9321] audit: op="connection-activate" uuid="0e63d056-8067-40cd-8dd4-5238084849cc" name="XXXXX" pid=19424 uid=1000 result="success" Jun 7 11:24:13 christian-Inspiron-3459 NetworkManager[1274]: <info> [1496849053.9442] vpn-connection[0x19f17d0,0e63d056-8067-40cd-8dd4-5238084849cc,"XXXXX",0]: Started the VPN service, PID 5960 Jun 7 11:24:13 christian-Inspiron-3459 NetworkManager[1274]: <info> [1496849053.9927] vpn-connection[0x19f17d0,0e63d056-8067-40cd-8dd4-5238084849cc,"XXXXX",0]: Saw the service appear; activating connection Jun 7 11:24:14 christian-Inspiron-3459 NetworkManager[1274]: <info> [1496849054.0305] keyfile: update /etc/NetworkManager/system-connections/SEREMI Salud Bío Bío (0e63d056-8067-40cd-8dd4-5238084849cc,"SEREMI Salud Bío Bío") (... 2 minutes after...)) Jun 7 11:26:14 christian-Inspiron-3459 NetworkManager[1274]: <error> [1496849174.0434] vpn-connection[0x19f17d0,0e63d056-8067-40cd-8dd4-5238084849cc,"XXXXX",0]: Failed to request VPN secrets #3: No agents were available for this request. This is in the connection window: POST https://a.b.c.d/ Intentando conectar al servidor a.b.c.d:443 Negociación SSL con «a.b.c.d» Conectó a HTTPS en a.b.c.d Se obtuvo la respuesta HTTP: HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Cache-Control: no-cache Pragma: no-cache Connection: Keep-Alive Date: Wed, 07 Jun 2017 15:24:14 GMT X-Frame-Options: SAMEORIGIN X-Aggregate-Auth: 1 Cuerpo HTTP chunked (-2) POST XML activado POST https://a.b.c.d/ Se obtuvo la respuesta HTTP: HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Cache-Control: no-cache Pragma: no-cache Connection: Keep-Alive Date: Wed, 07 Jun 2017 15:24:14 GMT X-Frame-Options: SAMEORIGIN X-Aggregate-Auth: 1 Cuerpo HTTP chunked (-2) POST XML activado POST https://a.b.c.d/ Se obtuvo la respuesta HTTP: HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Cache-Control: no-cache Pragma: no-cache Connection: Keep-Alive Date: Wed, 07 Jun 2017 15:24:16 GMT X-Frame-Options: SAMEORIGIN X-Aggregate-Auth: 1 Cuerpo HTTP chunked (-2) Is there another log that I can send to you? (I've made a video recording but it shows some sensitive data. Perhaps I could send it to you personal email if needed.)
Do you get openconnect dialog once you attempt to activate your connection?
Yes, it's the second part of the logs I've posted.
*** This bug has been marked as a duplicate of bug 380299 ***
Bulk transfer as requested in T17796