Return to Question

Can anyone tell me what's wrong? (see Update below for further information on the cert and how I imported it on the client side)

UPDATE: The following screenshot shows how the certifacte on the Zyxel USG is setup. All blackened parts are set to my.domain.tld. As you can see there, it seems the Subject Alternative Name of the certificate is set correctly (means: it is equal to the FQDN of the Zyxel device which serves the VPN connection and I'm trying to connect to):

Unfortunately I still get the same output as described above.

Can anyone tell me what's wrong? (see UPDATE I below for further information on the cert and how I imported it on the client side and UPDATE II for a working Windows setup)

UPDATE I: The following screenshot shows how the certifacte on the Zyxel USG is setup. All blackened parts are set to my.domain.tld. As you can see there, it seems the Subject Alternative Name of the certificate is set correctly (means: it is equal to the FQDN of the Zyxel device which serves the VPN connection and I'm trying to connect to):

UPDATE II: In Windows I'm able to connect to the VPN with the following VPN-Adapter Settings (same certificate imported in machine-wide "Trusted Root Certificate Authorities"):

1. Navigate to Control Center > Network and Internet > Network and Share Center
2. Click Adapter Settings
3. Right click on > Properties
4. Security:

• VPN Type: IKEv2
• Encryption: Required
• Authentication: ✓ Use Extensible-Authentication-Protocol (EAP): Microsoft: Secured Password (EAP-MSCHAP v2)(Encryption enabled)

UPDATE: The following screenshot shows how the certifacte on the Zyxel USG is setup. All blackened parts are set to my.domain.tld. As you can see there, it seems the Subject Alternative Name of the certificate is set correctly:

UPDATE: The following screenshot shows how the certifacte on the Zyxel USG is setup. All blackened parts are set to my.domain.tld. As you can see there, it seems the Subject Alternative Name of the certificate is set correctly (means: it is equal to the FQDN of the Zyxel device which serves the VPN connection and I'm trying to connect to):

Can anyone tell me what's wrong?

Can anyone tell me what's wrong? (see Update below for further information on the cert and how I imported it on the client side)

UPDATE: The following screenshot shows how the certifacte on the Zyxel USG is setup. All blackened parts are set to my.domain.tld. As you can see there, it seems the Subject Alternative Name of the certificate is set correctly:

I downloaded this cert and imported it on the client side with the following commands:

sudo cp ~/Downloads/VPN_my.domain.tld.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

And then in Network Manager I selected the generated /etc/ssl/certs/VPN_my.domain.tld.pem.

Unfortunately I still get the same output as described above.