Tuesday, February 19, 2019

Fix your server's certificate or use --servercert to trust it OpenConnect

When you try to connect your VPN using OpenConnect 7.08 you may encounter below error. 

The --no-cert-check option was insecure and has been removed.
Fix your server's certificate or use --servercert to trust it.

Fix ::

Fix your server's certs (perhaps using LetsEncrypt), or fetch the cert
and use it in a --cafile option, or use the --servercert option (which
is helpfully suggested now on the command line when you are prompted to
manually accept a cert).

But don't use --no-cert-check. That's just insecure or skip --no-cert-check option.And wont work any more from 7.08 onwards.