Skip to main content
rafalnarowski
Explorer
June 4, 2022
Solved

VPN connection not working after update to Ubuntu 22.04

  • June 4, 2022
  • 11 replies
  • 43317 views

Hi,

 

I've been using FortiClient VPN on Ubuntu 20.04 and have no problems. 

Last week I have installed Ubuntu 22.04 from scratch and have several issues connecting to company VPN. 

 

Today I've manage to connect to company VPN but no `bytes received` has to come.

Screenshot from 2022-06-04 21-25-27.png

Logs shows, that some routes are failed to add:
e.g. [sslvpn:DEBG] route:475 Failed add route: addr XX.X.X.X netmask 255.255.0.0 gw XX.X.XXX.X dev vpn
this command fails several times.

 

Could someone help me with this?

 

Also sometimes connecion is not established and have this error in logs: [sslvpn:DEBG] main:1457 exception: Backup routing table failed

 

Regards.

Best answer by rafalnarowski

Hello, thank's to @Anthony_E  i was able to find solution.

I made changes described here: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1960268/comments/32

 

 

Regards.

11 replies

Anthony_E
Staff
Staff
June 7, 2022

Hello rafalnarowski,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Best Regards
Anthony_E
Staff
Staff
June 7, 2022

Hello,

 

I have found this forum post:

 

https://community.fortinet.com/t5/Fortinet-Forum/Forticlient-SSL-VPN-not-working-on-Ubuntu/m-p/92308

 

Apparently, you can found some important information.

 

If it is not solving your issue, we will find another solution.

 

Regards,

Best Regards
rafalnarowski
Explorer
June 7, 2022

@Anthony_E thank You for response. Unfortunately https://community.fortinet.com/t5/Fortinet-Forum/Forticlient-SSL-VPN-not-working-on-Ubuntu/m-p/92308 is not solving my problem.

 

I cannot use openforticlient, because of my company VPN configuration.

Anthony_E
Staff
Staff
June 7, 2022

Hello,

 

I will then continue to find a solution or somebody for helping you!

 

Regards,

Best Regards
claudemir
Explorer
June 16, 2022

I have the same problem. Do you found the solution?

rafalnarowski
Explorer
June 16, 2022

Hi @claudemir, unfortunately not. @Anthony_E  is looking for a solution.

Anthony_E
Staff
Staff
June 20, 2022

Hi all!

 

Rafalnarowski  found the solution :)!!!

 

https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1960268/comments/32

 

Regards,

Best Regards
rafalnarowski
rafalnarowskiAuthorAnswer
Explorer
June 20, 2022

Hello, thank's to @Anthony_E  i was able to find solution.

I made changes described here: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1960268/comments/32

 

 

Regards.

claudemir
Explorer
June 20, 2022

It's not working for me.

 

I commented out these lines and added the others and restarted but same thing.

 

Do you use global or forticlient project? Did you need to update any packages?

 

Sure of your understanding

sw2090
SuperUser
SuperUser
June 21, 2022

Maybe it is AppArmor striking you?
I once had an isse with strongswan not setting the DNS servers because AppArmor didn't allow it to write to the resolve.conf.

Maybe something similar is happening here?

I don't run ssl vpn nor forticlient on ubuntu (hence the linux version still lacks any ipsec support) so I cannot verfiy nor test it.

claudemir
Explorer
July 5, 2022

@sw2090 How did you change the permissions of the resolv.conf? Or you did disable apparmor? I want to try with forticlient.

 

Sure of your understanding and grateful for your contribution.

sw2090
SuperUser
SuperUser
July 11, 2022

I changed the AppArmor profile for strongswan to allow writing to the resolv.conf.