In recent rolling builds of 1.3 Equuleus something looks broken in openconnect vpn. Clients are unable to connect. HTTPs connection to an end-point throws '404 Not Found' error instead of expected XML served.
My config:
# show vpn openconnect
authentication {
mode radius
radius {
server 172.16.xxx.xxx {
key ******
}
source-address 192.168.xxx.xxx
}
}
listen-ports {
tcp 443
udp 443
}
network-settings {
client-ip-settings {
subnet 192.168.xxx.0/24
}
name-server 172.16.xxx.xxx
name-server 172.16.xxx.xxx
push-route 172.16.xxx.0/24
}
ssl {
ca-cert-file /config/auth/rootca.pem
cert-file /config/auth/cert-chain.pem
key-file /config/auth/key.pem
}I also checked by switching to local authentication. Same thing.
ocserv process looks running and listening. But client connections are not possible. I observe this behavior in every build starting from the mid of January. Going back to mid-December build restores the functionality.
Client's log contains:
2022-02-13 13:52:47 | 70000ffbc000 | Failed to parse HTTP response 'HTTP/1.57679 404 Not found'