Reset Search
 

 

Article

KB40574 - Pulse Secure Linux client failed to connect in Ubuntu 16.04 with the message "Certificate Verification Failed : error:unable to get local issuer certificate depth:0 errorno:20"

« Go Back

Information

 
Last Modified Date4/20/2017 7:40 PM
Synopsis
This article describes an issue where Pulse Secure for Linux client fails to connect with Ubuntu 16.04 and above with the message "Certificate Verification Failed : error:unable to get local issuer certificate depth:0 errorno:20"
Problem or Goal
When Pulse Secure Linux client failed to connect in Ubuntu 16.04, the following message will appear in the pulsesvc.log:
dsssl.warn ssl_init : Failed to load CA certificates (DSSSLSock.cpp:1515)
ain.info Setting NCP certificate hash for DSSSL certificate verification (ncp.cpp:1934)
main.info Using DSSSL to connect to IVE (ncp.cpp:2023)
connect.info creating a new HTTP connection... (ncp_dsssl.cpp:187)
dsssl.error verify_server_cert_callback : Certificate Verification Failed : error:unable to get local issuer certificate 
depth:0 errorno:20 (DSSSLSock.cpp:1588)
Cause
This issue occurs due Pulse Secure for Linux client is unable to validate the device certificate due to a missing certificate chain on the Pulse Connect Secure (PCS).
Solution
To identify the missing certificate, run the following command using openssl.
openssl s_client -connect <IVE-Host-name>:443

The above command will output the complete certificate chain. With the list, compare the certificates loaded in Pulse Connect Secure appliance.  In most cases, there should always be more than 1 certificate.  If only 1 certificate is provided in the output, contact your certificate authority to clarify what intermediate certificates are needed.
  1. Log in to admin console
  2. Navigate to Configuration > Certificate > Device Certificates > Intermediate CAs
  3. Click Import CA certificate
  4. Browse to the Intermediate CA obtained from the CA
  5. Click OK
Related Links
Attachment 1 
Created ByNiranjan Rathinaswami

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255