Thanks for the replies. re: csuchindra I followed your suggestions as per the KB article. The behaviors is the same and I'm not seeing a difference in the error log. I can see that the crt I downloaded is now in /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt, the comment being the name of the downloaded crt. Again, I masked host id info. 20170919085800.125662 pulsesvc[p3574.t3574] dsncuiapi.para DsNcUiApi::DsNcUiApi (dsncuiapi.cpp:75) 20170919085800.127019 pulsesvc[p3574.t3574] pulseui.info /usr/lib/libproxy.so.1 loaded (pulseProxy.cpp:160) 20170919085800.143506 pulsesvc[p3574.t3574] pulseui.info proxy is direct:// (pulseProxy.cpp:185) 20170919085800.143576 pulsesvc[p3574.t3574] pulseui.info Protocol :direct Credential : (pulseProxy.cpp:58) 20170919085800.143604 pulsesvc[p3574.t3574] dsclient.para DSClient::authenticate(): user:(NULL), password:..., cert:81c50c1, realm:(NULL) (dsclient.cpp:306) 20170919085800.145792 pulsesvc[p3574.t3574] DSInet.info IVE host vpn.DOMAIN.com resolved to 63.0.1.2, port 443 (dsinet.cpp:329) 20170919085800.160536 pulsesvc[p3574.t3574] dsssl.warn ssl_init : Failed to load CA certificates (DSSSLSock.cpp:1515) 20170919085800.160570 pulsesvc[p3574.t3574] http_connection.para Starting a timed connect with SSL session 0xa0014c0, proxy (null):0, and timeout 30 (http_connection.cpp:236) 20170919085800.160586 pulsesvc[p3574.t3574] http_connection.para Entering state_start_connection (http_connection.cpp:351) 20170919085800.160599 pulsesvc[p3574.t3574] http_connection.para Remote Address: ip=63.0.1.2, port=443, familiy=2 (http_connection.cpp:799) 20170919085800.160610 pulsesvc[p3574.t3574] http_connection.para Remote Server=vpn.DOMAIN.com (http_connection.cpp:801) 20170919085800.160621 pulsesvc[p3574.t3574] http_connection.para Local Address: ip=0.0.0.0, port=0, familiy=2 (http_connection.cpp:806) 20170919085800.160632 pulsesvc[p3574.t3574] http_connection.para Proxy Address: ip=(null), port=0, familiy=0 (http_connection.cpp:811) 20170919085800.198357 pulsesvc[p3574.t3574] http_connection.para Entering state_continue_connection (http_connection.cpp:368) 20170919085800.198494 pulsesvc[p3574.t3574] http_connection.para Entering state_ssl_connect (http_connection.cpp:538) 20170919085800.232797 pulsesvc[p3574.t3574] dsssl.error verify_server_cert_callback : Certificate Verification Failed : error:unable to get local issuer certificate depth:0 errorno:20 (DSSSLSock.cpp:1588) 20170919085800.232987 pulsesvc[p3574.t3574] dsssl.info log_cert_info : Subject : OU = Domain Control Validated, OU = COMODO SSL, CN = vpn.DOMAIN.com (DSSSLSock.cpp:1555) 20170919085800.233323 pulsesvc[p3574.t3574] dsssl.error SSL_connect failed. Error 1 (DSSSLSock.cpp:1834) 20170919085800.233404 pulsesvc[p3574.t3574] http_connection.para Returning DSHTTP_ERROR from state_ssl_connect (http_connection.cpp:553) 20170919085800.233451 pulsesvc[p3574.t3574] http_connection.para do_connect error: state 5, err 5 (http_connection.cpp:341) 20170919085800.233630 pulsesvc[p3574.t3574] DSInet.error failed to connect to (vpn.DOMAIN.com) error 1 (dsinet.cpp:412) 20170919085800.233725 pulsesvc[p3574.t3574] dsclient.error unable to open URL: (https://vpn.DOMAIN.com) with error -7 (dsclient.cpp:321) 20170919085800.233777 pulsesvc[p3574.t3574] pulsesvc.error Failed to authenticate with IVE.HC Failed (pulsesvc.cpp:956) 20170919085800.233857 pulsesvc[p3574.t3574] pulseui.info Proxy object is delete (pulseProxy.cpp:26)
... View more