Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot connect to Fortigate 7.4.4 SSLVPN "Error reading from SSL connection" #1233

Open
Voriaz opened this issue Jul 19, 2024 · 1 comment
Open

Comments

@Voriaz
Copy link

Voriaz commented Jul 19, 2024

Hi,

I have an issue connecting to a Fortigate SSLVPN using openfortivpn.
The issue appears right after an upgrade of the Fortigate (7.2.8 -> 7.4.4). It was working perfectly fine before (launched regularly via cron task).

OpenfortiVPN verbose logs say:

Error issuing /remote/login request 
Could not authenticate to gateway. Please check the password, client certificate, etc. 
SSL error (-4) 
Closed connection to gateway."

I suspected a TLS issue, so I upgraded openfortivpn to latest version (manual compiled install) on a recent Debian12 VM without success. I also tested on Ubuntu 24.04 with lastest apt package.

When inspecting the Fortigate debug log, I see do_http_validate:447 Content-Length (11) on uri (/remote/login) not allowed.

Is this something related to openfortivpn not up to date with lastest fortiVPN specs or is it a bug in latest fortiOS version ?

Please see attached redacted logs from openfortivpn and fortigate.
openfortivpn.log
FWVPN.log

Thanks,

A.

@Voriaz
Copy link
Author

Voriaz commented Jul 22, 2024

I found that probably the procotol has changed on FortiOS. I proposed a pull request that fixes that: #1234

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant