Arch Linux User Repository

For whatever reason fortitraylauncher has been entirely rewritten in rust with 7.4.5 and no longer launches on my system. fortitray is fine on it's own though....

Currently in some reverse engineering hell trying to work out what the issue is, but I guess it's at least interesting that there's some cool development going on on Fortinet's side.

I could make the symlink part of the package if people think it would be helpful? /etc/pki/ca-trust isn't owned by any package in the repos so it shouldn't cause conflicts.

I'll also look into what dpkg hooks exist in the package for Debian side because it might be worth creating equivalent pacman hooks.

There is an issue with how FortiClient installs SSL certificates on the system. It places them in /etc/pki/ca-trust/source/anchors, but on Arch the correct directory is /etc/ca-certificates/trust-source/anchors. Because of this mismatch, the certificates are not loaded correctly.

As a workaround, I’ve symlinked FortiClient’s certificate directory to Arch’s:

rm -rf /etc/pki/ca-trust/source/anchors
ln -sf /etc/ca-certificates/trust-source/anchors /etc/pki/ca-trust/source

Thanks to WASD's solution I have been able to run forticlient at last. You're a lifesaver!

I had the same problem as rhl. By extracting the electron app I found the relevant source code that causes the problem:

...
child_process.exec('ps aux | grep forticlient', async (err, stdout, stderr) => {
  if (!_.includes(stdout, '/opt/forticlient/fctsched')) {
    sudo.exec('systemctl start forticlient', { name: 'FortiClient' }, async (err, stdout, stderr) => {
      if (!_.isEmpty(err)) {
        fs.writeFile('/temp/forticlient_gui.log', err, 'utf8');
...

It is trying to use the npm sudo-prompt package, but for some reason fails and the error handling is broken. Running "systemctl start forticlient" manually before /opt/forticlient/gui/FortiClient makes it avoid this and the GUI starts for me. Alternatively, one could try to get sudo-prompt to work. I have "pkexec" as their docs mention and running it gives me a terminal prompt. I'm guessing it expects a native OS dialog. Feels like the PKGBUILD is missing a dependency for this.

I see that fortitraylauncher runs when I launch the gui. If I launch FortiClient, after terminating the process that shows the error several processes are left running:

  34790 pts/3    S      0:00 /opt/forticlient/gui/FortiClient --type=zygote --no-zygote-sandbox
  34791 pts/3    S      0:00 /opt/forticlient/gui/FortiClient --type=zygote
  34793 pts/3    S      0:00 /opt/forticlient/gui/FortiClient --type=zygote
  34862 ?        Ss     0:00 /opt/forticlient/fortitraylauncher

However even though fortitraylauncher runs, no fortinet tray icon appears...

Every time I've ended up with weird errors, annoyingly they could only be fixed by a restart.

Only other thing of note is do you have fortitraylauncher running?

exec --no-startup-id /opt/forticlient/start-fortitray-launcher.sh 

Hi, I'm trying to start the forticlient GUI under i3 and I just get what looks like a node.js error:

/opt/forticlient/gui/FortiClient
(node:29452) UnhandledPromiseRejectionWarning: TypeError [ERR_INVALID_ARG_TYPE]: The "cb" argument must be of type function. Received type string ('utf8')
    at maybeCallback (node:fs:189:3)
    at Object.writeFile (node:fs:2266:14)
    at /opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:247903
    at d (/opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:234418)
    at Generator.<anonymous> (/opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:235760)
    at Generator.next (/opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:234847)
    at u (/opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:240321)
    at a (/opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:240524)
    at /opt/forticlient/gui/resources/app.asar/assets/js/main.js:8:240583
    at new Promise (<anonymous>)
(Use `FortiClient --trace-warnings ...` to show where the warning was created)
(node:29452) UnhandledPromiseRejectionWarning: Unhandled promise rejection. This error originated either by throwing inside of an async function without a catch block, or by rejecting a promise which was not handled with .catch(). To terminate the node process on unhandled promise rejection, use the CLI flag `--unhandled-rejections=strict` (see https://nodejs.org/api/cli.html#cli_unhandled_rejections_mode). (rejection id: 1)

I'm using the i3 window manager. Prior to this error I was getting complaints about not being able to find the FileChooser portal, which were solved by installing xdg-desktop-portal-gtk.

Am I launching the application in a wrong manner? I'm running out of ideas with this.

Oh wow thanks for reminding me.

I'd actually had it in my local clone since release day but couldn't push it at work due to firewall rules and told myself I'd 100% remember when I got home :P

There's a 7.4.4.1796 build out since 25-09-09

Package: forticlient Version: 7.4.4.1796 Architecture: amd64 Maintainer: Fortinet Inc. http://support.fortinet.com Installed-Size: 629634 Depends: libc6 (>= 2.15), libappindicator3-1 (>> 0) | libayatana-appindicator3-1 (>> 0), libudev1 (>> 0), libatk-bridge2.0-0 (>= 2.5.3), libatk1.0-0 (>= 2.2.0), libatspi2.0-0 (>= 2.9.90), libcairo2 (>= 1.6.0), libcups2 (>= 1.4.0), libexpat1 (>= 2.0.1), libgcc1 (>= 1:3.0), libglib2.0-0 (>= 2.35.8), libgtk-3-0 (>= 3.9.10), libnspr4 (>= 2:4.9-2~), libnss3 (>= 2:3.22), libpango-1.0-0 (>= 1.14.0), libpangocairo-1.0-0 (>= 1.14.0), libx11-6 (>= 2:1.4.99.1), libx11-xcb1, libxcb1 (>= 1.6), libxcomposite1 (>= 1:0.3-1), libxcursor1 (>> 1.1.2), libxdamage1 (>= 1:1.1), libxext6, libxfixes3 (>= 1:5.0), libxi6 (>= 2:1.2.99.4), libxrandr2 (>= 2:1.2.99.3), libxrender1, libxss1, libxtst6, libsecret-1-0 (>= 0.18.4), gzip (>= 1.6), libnss3-tools (>= 3.21), iptables Homepage: https://www.forticlient.com Priority: extra Section: utils Filename: pool/non-free/f/forticlient/forticlient_7.4.4.1796_amd64.deb Size: 167198578 SHA256: 5fad04f3ed745519caeeca9705398f00f304f8a68c02b907905f66ae6b7bd13e SHA1: b22800601aae6c3e74949af333e759e21af5d349 MD5sum: 70f35e00739a8bb5469ed98b6e6d559c Description: FortiClient is an award winning endpoint protection software FortiClient is an endpoint protection application that runs on Microsoft Windows, Mac OS X, Linux, iOS and Android. It is backed by antivirus engine and signatures from the well-known FortiGuard labs - www.fortiguard.com. FortiClient on Windows has won various third-party awards, such as from VB100, AV Comparatives and NSS.