VPN connection on Edison board

[RKasu]

Hi all,

I'm using http://git.yoctoproject.org/cgit/cgit.cgi/meta-intel-edison/about meta-intel-edison - Layer for the Intel Edison Development Platform image on my intel edison arduino expansion board,I'm trying to connect my edison by VPN. I have tried two methods ,they are

Method-1:

I'm unable to connect to vpn as there is no script loading into vpn-script after ./configure and I'm getting the error as mentioned in the link https://bugs.kde.org/show_bug.cgi?id=348318 https://bugs.kde.org/show_bug.cgi?id=348318

POST www.google.com

Attempting to connect to server 144.92.42.108:443

SSL negotiation with dept-ra-cssc.vpn.wisc.edu

Server certificate verify failed: signer not found

SSL connection failure: Error in the certificate.

Failed to open HTTPS connection to dept-ra-cssc.vpn.google.com

I'm tried the same open connect command by no-certi-check but it is not working.

Method:2

https://www.snip2code.com/Snippet/996017/Openvpn-Intel-Edison-Yocto https://www.snip2code.com/Snippet/996017/Openvpn-Intel-Edison-Yocto

I got a doubt whether it works for my image or not.I'm using the image http://git.yoctoproject.org/cgit/cgit.cgi/meta-intel-edison/about meta-intel-edison - Layer for the Intel Edison Development Platform .I followed the same process as mentioned in the link,the error I'm getting is in the below image

Can you please suggest me the steps to connect the edison to VPN.Please do needful.Hope the answer is helpful.

Thanks and Regards,

Radhika

[RKasu]

Hi all,

I'm adding some more details.I'm following the link ,here in the vpn-script I'm copying the sh file from the link http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script http://git.infradead.org/users/dwmw2/vpnc-scripts.git/blob_plain/HEAD:/vpnc-script and following the steps

wget ftp://ftp.infradead.org/pub/openconnect/openconnect-7.06.tar.gz ftp://ftp.infradead.org/pub/openconnect/openconnect-7.06.tar.gz && tar xvf openconnect-7.06.tar.gz && cd openconnect-7.06 && ./configure --with-vpnc-script=/etc/vpnc/vpnc-script && make && make install

chmod u+x /etc/vpnc/vpnc-script

openconnect -s /etc/vpnc/vpnc-script vpn.myschool.edu

But I'm getting the same error

I tried to install vpnc and installed the dependencies but it failed because of the error,The screenshots are pinned,please have a look on them.

Can you please provide the steps to install vpnc or vpnc-script.If I'm just copy pasting the script file and pasting in vpnc-script it is not working and getting the above mentioned error and no signer found.

Can I know the steps to install openvpn on edison ?If I'm trying through opkg install openvpn it is showing as unknown package.I have the packages listed below in intel-iotdk.conf file

src intel-iotdk http://iotdk.intel.com/repos/1.1/intelgalactic

src intel-all http://iotdk.intel.com/repos/1.1/iotdk/all

src intel-quark http://iotdk.intel.com/repos/1.1/iotdk/quark

src intel-i586 http://iotdk.intel.com/repos/1.1/iotdk/i586

src intel-x86 http://iotdk.intel.com/repos/1.1/iotdk/x86

Please do needful by giving the detailed steps of connection of VPN to edison. Thanks in advance.

Thanks and Regards,

Radhika.

[Sergio_A_Intel]

Hi Radhika,

I ran the steps on the link you mentioned and didn't see any errors. These are the steps I followed:

1. wget ftp://ftp.infradead.org/pub/openconnect/openconnect-7.06.tar.gz && tar xvf openconnect-7.06.tar.gz && cd openconnect-7.06 && ./configure --with-vpnc-script=/etc/vpnc/vpnc-script && make && make install

2. mkdir /etc/vpnc

3. nano vpnc-script

4. chmod u+x /etc/vpnc/vpnc-script

5. openconnect -s /etc/vpnc/vpnc-script vpn.myschool.edu

All these steps have to be run just as they are described here except for the last one where you have to use your own vpn server name. What VPN server name are you using? Do you see any errors when running any of the previous commands? I ran these commands with the latest image. Why are you using this image instead of the provided here https://software.intel.com/en-us/iot/hardware/galileo/downloads https://software.intel.com/en-us/iot/hardware/galileo/downloads? Run the commands above and if any of them give an error please attach a screenshot.

-Sergio

[RKasu]

Hi Sergio,

Thanks for the reply,I followed the same process and I'm getting the result as below.I have installed vpnc-scripts from https://github.com/alonbl/vpnc-scripts GitHub - alonbl/vpnc-scripts .

If I'm changing the server name I'm getting as

Is there any other way to install vpnc-script.?After the step openconnect -s /etc/vpnc/vpnc-script vpn.myschool.edu, will the server asks for username and password??

Is the actual output is this??

I'm using latest image only..Can you please look into the above 3 screenshots and figure what's wrong in this?? what is the image you are using?If we should install vpnc-script ,what is the process should be followed for vpnc-script??

Thanks and Regards,

Radhika

[idata]

Hi Radhika,

I tested the VPN connection using the vpnc-script you posted in the last reply but ended up with a similar issue to yours. My error was the following:

root@TQFGOD:/etc/vpnc# openconnect -s /etc/vpnc/vpnc-script www.google.com

POST https://www.google.com/ https://www.google.com/

Attempting to connect to server 216.58.219.100:443SSL negotiation with www.google.comServer certificate verify failed: signer not foundCertificate from VPN server "www.google.com" failed verification.Reason: signer not foundEnter 'yes' to accept, 'no' to abort; anything else to view: yesSSL connection failure: The operation timed outFailed to open HTTPS connection to www.google.comFailed to obtain WebVPN cookie

I looked at my openconnect version. I'm using v7.06. In one of your screenshots there's a warning message that says:

"This version of openconnect is v7.06 but the libopenconnect library is v7.07"

Have you tried upgrading your openconnect so that it matches the libopenconnect library? Upgrade it and let us know if you continue to see the same results. Post screenshots of your progress.

We'll be waiting for your response.

-Sergio

[RKasu]

Hi Sergio,

I have changed the version of the open connect but still the error seems to be the same..can you please let us know Can I connect to vpn. Please do needful.

Thanks and Regards,

Radhika.

[idata]

If you don't require the server SSL certificate to be valid you can use the –no-check-cert option. If your certificate information has a server key hash you can use the --servercert=FINGERPRINT option. You can also ask about openconnect here http://www.infradead.org/openconnect/mail.html http://www.infradead.org/openconnect/mail.html . They might be able to provide a more accurate response.

Let us know what are your results and if you contacted openconnect.We'll be waiting for your response.-Sergio

[idata]

Hi Radhika,

Do you still need assistance with this case? Were you able to set the VPN connection?-Sergio

[KDuns1]

I am having same issue when I tested using VPNC Script.

Hi all,

I'm using http://git.yoctoproject.org/cgit/cgit.cgi/meta-intel-edison/about meta-intel-edison - Layer for the Intel Edison Development Platform image on my intel edison arduino expansion board,I'm trying to connect my edison by VPN. I have tried two methods ,they are

Method-1:

/thread/57481 How can I setup a VPN in my edison board?

https://support.purevpn.com/windows-setup-guide How can I setup a VPN on Windows

I'm unable to connect to vpn as there is no script loading into vpn-script after ./configure and I'm getting the error as mentioned in the link https://bugs.kde.org/show_bug.cgi%3Fid%3D348318 https://bugs.kde.org/show_bug.cgi?id=348318

POST www.google.com

Attempting to connect to server 144.92.42.108:443

SSL negotiation with dept-ra-cssc.vpn.wisc.edu

Server certificate verify failed: signer not found

SSL connection failure: Error in the certificate.

Failed to open HTTPS connection to dept-ra-cssc.vpn.google.com

I'm tried the same open connect command by no-certi-check but it is not working.

Method:2

https://www.snip2code.com/Snippet/996017/Openvpn-Intel-Edison-Yocto https://www.snip2code.com/Snippet/996017/Openvpn-Intel-Edison-Yocto

I got a doubt whether it works for my image or not.I'm using the image http://git.yoctoproject.org/cgit/cgit.cgi/meta-intel-edison/about meta-intel-edison - Layer for the Intel Edison Development Platform .I followed the same process as mentioned in the link,the error I'm getting is in the below image

/servlet/JiveServlet/showImage/2-424518-295077/error_vpn1.png

Can you please suggest me the steps to connect the edison to VPN.Please do needful.Hope the answer is helpful.

Thanks and Regards,

Radhika

[idata]

Hi KirstenDunst,

Could you provide more details on what you've tried so far? What image are you using, what's the output of running cat /etc/version? Have you already upgraded openconnect to v7.07 ?

-Sergio