Cannot connect to Fortigate 7.4.4 SSLVPN "Error reading from SSL connection"

[Voriaz]

Hi,

I have an issue connecting to a Fortigate SSLVPN using openfortivpn.
The issue appears right after an upgrade of the Fortigate (7.2.8 -> 7.4.4). It was working perfectly fine before (launched regularly via cron task).

OpenfortiVPN verbose logs say:

Error issuing /remote/login request 
Could not authenticate to gateway. Please check the password, client certificate, etc. 
SSL error (-4) 
Closed connection to gateway."

I suspected a TLS issue, so I upgraded openfortivpn to latest version (manual compiled install) on a recent Debian12 VM without success. I also tested on Ubuntu 24.04 with lastest apt package.

When inspecting the Fortigate debug log, I see do_http_validate:447 Content-Length (11) on uri (/remote/login) not allowed.

Is this something related to openfortivpn not up to date with lastest fortiVPN specs or is it a bug in latest fortiOS version ?

Please see attached redacted logs from openfortivpn and fortigate.
openfortivpn.log
FWVPN.log

Thanks,

A.

[Voriaz]

I found that probably the procotol has changed on FortiOS. I proposed a pull request that fixes that: #1234

[gtache]

Hello, I have the same issue and I see that a patch has been merged 6 months ago.
Will there be a release soon?

Thanks!

[adrienverge]

Sure, we could release openfortivpn 1.23.0 including this patch, and SAML login authentication.

I just opened #1266 for that.

[gtache]

Thanks for your response. I'm on Fedora 41 but I don't really know how the release process works. Are you the one who should release it there or are there maintainers on the Fedora side who have to do it?

[adrienverge]

Hello Guillaume,

It's not only me: any volunteer maintainer can do it :)

For this one, I just did it, see https://bodhi.fedoraproject.org/updates/FEDORA-2025-999492ef10