Package Details: microsoft-azure-vpn-client-bin 3.0.0-1

Git Clone URL: https://aur.archlinux.org/microsoft-azure-vpn-client-bin.git (read-only, click to copy)
Package Base: microsoft-azure-vpn-client-bin
Description: The official Azure VPN Client, supporting Entra ID and certificates
Upstream URL: https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux
Keywords: az, azure-vpn, azvpn, vpn
Licenses: proprietary
Provides: microsoft-azure-vpn-client, microsoft-azurevpnclient
Submitter: trovao
Maintainer: trovao
Last Packager: trovao
Votes: 1
Popularity: 0.000004
First Submitted: 2024-07-30 14:13 (UTC)
Last Updated: 2026-03-03 15:01 (UTC)

Latest Comments

1 2 3 4 5 Next › Last »

chrisn commented on 2026-04-30 12:53 (UTC)

@roelof yes, that's what I did after I wrote the last comment :) cheers

roelof commented on 2026-04-30 12:30 (UTC)

@chrisn, had the same issue. Resolved it by installing the 'Digicert Global Root CA' certificate manually after downloading it from: https://knowledge.digicert.com/general-information/digicert-trusted-root-authority-certificates

That way you don't have to downgrade anything.

chrisn commented on 2026-04-30 12:06 (UTC) (edited on 2026-04-30 12:12 (UTC) by chrisn)

Okay, found the issue. The culprit seems to be ca-certificates-mozilla - the latest version as of today (3.123.1) does not contain the certificate DigiCert_Global_Root_CA.pem) anymore, and it just so happens that Azure uses that as their root CA to sign the VPN certificates. Downgrading ca-certificates-mozilla to 3.122-1 fixed this, the VPN is connecting fine again.

Apparently the certificates don't comply with Mozillas policies: https://bugzilla.mozilla.org/show_bug.cgi?id=2017453

chrisn commented on 2026-04-30 11:44 (UTC) (edited on 2026-04-30 11:45 (UTC) by chrisn)

Hitting the following issue recently:

Apr 30 13:33:41 ryzenbox AzureVPNClient[200248]: TId:[201914] [Primary] OPENVPNFRAMING: OpenVpnFraming hit error processing packet, initiating teardown of tunnel        error: 610970100000012 from tls_openssl_common.cpp line 151, facility MobileAccess with detail: Root cert validation failed

The configs in question work on other machines (OSX, Ubuntu, Windows), so not sure what changed. It does not link to OpenSSL, which was my first assumption (had some breakages in microsoft-identity-broker earlier this year).

trovao commented on 2026-03-25 16:26 (UTC)

@pengux. Yeah, that's a bit annoying... I've been thinking about using bwrap to add /etc/os-release to the directory structure seen by the vpn client to fix that issue.

pengux commented on 2026-03-23 16:45 (UTC)

@trovao, ah I think I found the issue, was trying out the steps from other commenters here and the one that fixed it was adding VERSION="0" to /etc/os-release. Which is strange as I didn't know that it was removed and that the VPN client was requiring that value

pengux commented on 2026-03-23 15:28 (UTC)

@trovao, it worked previously. I've downloaded the PKGBUILD file manually and executed makepkg -si on it and the pkgrel is 4 so it seems to be the latest but the issue still persists. The source https://packages.microsoft.com/ubuntu/22.04/prod/pool/main/m/microsoft-azurevpnclient/microsoft-azurevpnclient_3.0.0_amd64.deb has been the same though AFAIK so it seems like it must be the Azure VPN API that has changed and broke the client. But if no one else have the problem then could it be some configuration on my end that needs to be reset?

trovao commented on 2026-03-05 14:01 (UTC)

@pengux, that's happened in the past (around June, 2024).

I wonder if the checksum change in the repo somehow "reverted" the package to a previous version.

Did you rebuild the package after the hash update I pushed a couple days ago? Were you having the issue earlier?

pengux commented on 2026-03-05 13:01 (UTC)

I'm getting the below error everytime I try to connect to the VPN:

[ERROR:flutter/runtime/dart_vm_initializer.cc(41)] Unhandled Exception: type 'Null' is not a subtype of type 'String' of 'other'
#0      _MainScreenState.connectProfile (package:AzureVpnClient/mainscreen.dart:603)
...

I haven't really digged into it but it seems like the API has changed but the client hasn't been updated to support those changes? Anyone have a workaround?

trovao commented on 2026-03-03 15:03 (UTC) (edited on 2026-03-03 15:03 (UTC) by trovao)

Thanks for the heads up @Dwa30v and @Arkady_Buryakov. I've updated the PKGBUILD accordingly.

(Odd that the hash changed, but modification date on the server still reads as 14-Jun-2024)

1 2 3 4 5 Next › Last »