Windows 7 users unable to connect to SSL-...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 217054

Description

This articles describes the error message 'The server you want to connect requests identification, please choose a certificate and try again (-5)'.

Debug log:

[227:root:377]SSL state:SSLv3/TLS write server done:DH lib(IPx.x.x.x)
[227:root:377]SSL_accept failed, 5:(null).

Scope

FortiGate.

Solution

Packet capture showing client machine only support Diffie-Hellman key exchange value 1024.

Set the dh-params to 1024 as below and resolve SSL-VPN connection issue.

# config system global
set dh-params 1024
end

3102

Contributors

ychia
Anonymous
Anthony_E

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Windows 7 users unable to connect to SSL-VPN via FortiClient

You are leaving our website