FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ychia
Staff
Staff
Article Id 217054
Description

This articles describes the error message 'The server you want to connect requests identification, please choose a certificate and try again (-5)'.


Debug log:


[227:root:377]SSL state:SSLv3/TLS write server done:DH lib(IPx.x.x.x)
[227:root:377]SSL_accept failed, 5:(null).

Scope FortiGate.
Solution

Packet capture showing client machine only support Diffie-Hellman key exchange value 1024.

 

Set the dh-params to 1024 as below and resolve SSL-VPN connection issue.


# config system global
    set dh-params 1024
  end

Contributors