Forticlient SSL error "certificate changed during login"

[Sbeheer-we]

Hi!

We are having problems with login in to our SSL VPN using Forticlient app 7.08 version on MacOS. Trying to login will result in an error saying "certificate changed during login." Our SSL certificate is still the same and has not expired. Macs with Forticlient 7.07 version can login without issue. Does anyone else experience this issue with Forticlient 7.08?

Thanks in advance!

[chauhans]

Hi @Sbeheer-we 

As I understand that you are having issues with logging to SSLVPN On MacOS with Forticlient version 7.0.8

Please provide us below debug logs to check further.

diag debug reset 

diagnose vpn ssl debug-filter src-addr4

diag debug appl sslvpn -1

diag debug enable

Once, you will execute above commands, please try connecting to forticlient again, to generte the logs, once logs are generated, please share us the logs.

Thanks.

[Sbeheer-we]

Thank you for your reply! There are several logs that were exported. I have added a WeTransfer link so you could check them out if you want. https://we.tl/t-53zUfoGVRY

Thank you very much for looking into this!

[Sbeheer-we]

Hi,

Did you manage to download the logs and have a look at it? Thank you in advance!

[kvimaladevi]

Hi Sbeheer-we,

Could you confirm if you get any error code along with the error "certificate changed during login" when VPN fails. We will be able to exactly match any known issues with the error codes.

Regards,

Vimala

[Sbeheer-we]

Hi Vimala,

Unfortunately we do not get an error code. Just the error message.

[rtichkule]

Hello,

Temporarily disable any antivirus or firewall to see whether they are interfering with the SSL connection.

Check If your FortiClient version is updated one. Outdated versions may be incompatible with server certificates. If necessary, update FortiClient to the most recent version.

BR

[Sbeheer-we]

Hi BR,

This was the latest version of Forticlient giving the problem.