Page MenuHomeVyOS Platform

OpenConnect Server redundancy check
Open, Requires assessmentPublicBUG


VyOS should not check the existence of` ca-cert-file` in config when using not self-signed certificates like certificates provided LetsEncrypt.

set vpn openconnect authentication local-users username user1 password 'user1'
set vpn openconnect authentication mode 'local'
set vpn openconnect network-settings client-ip-settings subnet ''
set vpn openconnect network-settings name-server ''
set vpn openconnect ssl cert-file '/etc/letsencrypt/live/'
set vpn openconnect ssl key-file '/etc/letsencrypt/live/'
[ vpn openconnect ]
openconnect ssl ca-cert-file required

[[vpn openconnect]] failed
Commit failed
Propose to exlude ca_cert_file from this list


Difficulty level
Easy (less than an hour)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible