Package Details: pulse-secure 9.1r15.0_b15819-2

Git Clone URL: (read-only, click to copy)
Package Base: pulse-secure
Description: Pulse Connect Secure (PCS) Client
Upstream URL:
Licenses: custom
Conflicts: pulse-connect-secure
Submitter: yan12125
Maintainer: chiwanpark
Last Packager: chiwanpark
Votes: 34
Popularity: 0.116893
First Submitted: 2017-09-02 07:40 (UTC)
Last Updated: 2022-05-09 14:35 (UTC)

Pinned Comments

chiwanpark commented on 2021-02-24 10:21 (UTC)

If you want to use old pulse-secure client 9.1r9, please download the following package.

The rewritten pulse-secure client requires a service called 'pulsesecure'. Please enable and start the service before running the client.

yan12125 commented on 2018-10-30 11:41 (UTC)

You need to rebuild webkitgtk if you got ICU related errors.

Latest Comments

AshEnke commented on 2022-06-16 17:54 (UTC) (edited on 2022-06-17 17:23 (UTC) by AshEnke)

I have a problem on the latest (9.1r15.0_b15819-2) and older versions : I start the pulsesecure service, and try to run the /opt/pulsesecure/bin/pulseUI command, and it's stuck at

dsOpenSSL Start - dsENGINE_register_ECDSA
dsOpenSSL End - dsENGINE_register_ECDSA

and it hangs there. If I try to press Ctrl + C to cancel it, the UI launches, but it looks like it doesn't detect the running service (lots of DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files error messages, and I can't connect.

What's weird is that if I stop the service and try to run the pulseUI program, it goes straight to the "missing service" error :

dsOpenSSL Start - dsENGINE_register_ECDSA
dsOpenSSL End - dsENGINE_register_ECDSA
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 

journalctl -u pulsesecure.service -f doesn't show anything wrong, and the pulselauncher command behaves the same...

Any idea ?

RaistlinMy commented on 2022-05-24 07:28 (UTC)

It doesn't save my connections. Every time I restart it I have to create my connections again. Is there anything that I am missing?

mso commented on 2022-05-10 06:22 (UTC)

Thanks, it works now.

chiwanpark commented on 2022-05-09 14:36 (UTC) (edited on 2022-05-09 14:36 (UTC) by chiwanpark)

@mso I've updated the package to ignore SSL certificate validation. Sorry for the inconvenience.

Note that skipping SSL validation is insecure. If you don't want skip the validation, remove the second line of PKGBUILD file.

DLAGENTS=("https::/usr/bin/curl -k -o %o %u")

mso commented on 2022-05-09 14:16 (UTC) (edited on 2022-05-09 14:17 (UTC) by mso)

Under Manjaro cannot update to 9.1r15 since curl complains about invalid SSL ceritificate when donwloading the following file:

Error output: curl: (60) SSL certificate problem: unable to get local issuer certificate

Does this work for you?

Note in case it may help someone: I managed to skip the error by manually downloading the rpm file to my local file system and editing the build file pointing the download destination to my local file: source_x86_64=("file://<MY_LOCAL_PATH>") (Replace <MY_LOCAL_PATH> with the path you downloaded the file to)

0BAD-C0DE commented on 2022-03-23 10:10 (UTC)

There is also another problem since last few updates. In case the connection gets stuck or is cancelled, the /etc/resolv.conf is not reset to previous contents.

In my specific case this makes pulse-secure unable to re-connect because the VPN-provided DNS servers cannot resolve the connection endpoint. This could be fixed on my VPN, but the resolv.conf should be reset to previous contents anyway.

bodograumann commented on 2022-03-23 09:42 (UTC)

The new version 9.1r14.0-b13525 does not work for me. When trying to connect it says, that the embedded chromium is not installed. Then it downloads and extracts the browser, but cannot use it afterwards. No error is logged.

billerby commented on 2022-03-14 17:13 (UTC) (edited on 2022-03-14 17:16 (UTC) by billerby)

Noticed a new release today but there is a later release actually (which was released in January):

dgaleano commented on 2022-03-10 12:54 (UTC)

I have tried version r12, r13, and r14 and all fail for me on an up-to-date system. I can see these errors on the logs:

failed with error /opt/pulsesecure//lib/iveConnectionMethod/ cannot open shared object file
'ConnectionManager' failed to start connection method integrationAccessMethod, error 1000
'AccessServiceProxy' createInstance of plugin integrationAccessMethod failed with error 0xe00103e8

Any ideas?

sonarom commented on 2022-02-28 18:23 (UTC)

New URL to use for the binary:

alex19damian commented on 2022-02-18 15:15 (UTC)

I have installed, enabled service and started. Still not working, freezing if i start from commandline and no written nothing on logs.

  ~/Downloads ❯ pulseUI dsOpenSSL Start - dsENGINE_register_ECDSA dsOpenSSL End - dsENGINE_register_ECDSA

If i interrupt with Ctrl + c, then start but dont save connections and no connect.

^C (pulseUI:19056): Gtk-WARNING **: 12:14:33.740: Theme parsing error: gtk.css:68:35: The style property GtkButton:child-displacement-x is deprecated and shouldn't be used anymore. It will be removed in a future version

DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files

shadww commented on 2022-01-16 05:34 (UTC) (edited on 2022-01-16 05:41 (UTC) by shadww)

Updated using

Temporary workaround until this get updated: 1. Download built zst from here 1b. Or you can build your own by modifying the code with the file URL and its md5sum hash. 2. Offline install using "sudo pacman -U *.zst"

cluxter commented on 2022-01-05 17:12 (UTC)

New URL to use for the binary:

0BAD-C0DE commented on 2022-01-02 14:08 (UTC) (edited on 2022-01-02 14:09 (UTC) by 0BAD-C0DE)

@DevopTux Your PKGBUILD works, but it still misses to pull extra/gtkmm3 and extra/webkit2gtk needed by the UI. Moreover, you missed the final "closed curl brace" (aka '}') from the script.

DevopTux commented on 2021-12-17 13:09 (UTC) (edited on 2021-12-17 13:14 (UTC) by DevopTux)

Here a PKGBUILD that I modified and works for now:

# Maintainer: Chiwan Park <>

pkgdesc='Pulse Connect Secure (PCS) Client'
depends=(gcc-libs libgnome-keyring openssl curl dbus libbsd)
optdepends=('psmisc: for pulsesvc -K', 'gtkmm3: for pulseUi', 'webkit2gtk: for pulseUi')

package() {
   install -Dm644 EULA.txt "$pkgdir"/usr/share/licenses/$pkgname/EULA.txt

   for d in $(find opt/pulsesecure -type d); do
       install -dm755 "$d" "$pkgdir"/"$d";
   for f in $(find opt/pulsesecure/bin -type f); do
       install -Dm755 "$f" "$pkgdir"/"$f";
   for f in $(find opt/pulsesecure/lib -type f); do
       install -Dm755 "$f" "$pkgdir"/"$f";
   for f in $(find opt/pulsesecure/resource -type f); do
       install -Dm644 "$f" "$pkgdir"/"$f";
   install -Dm644 usr/share/man/man1/pulse.1.gz "$pkgdir"/usr/share/man/man1/pulse.1.gz

   # we move service unit file to /usr/lib/systemd/system due to pacman limitation
   install -Dm644 lib/systemd/system/pulsesecure.service "$pkgdir"/usr/lib/systemd/system/pulsesecure.service

   mkdir -p "$pkgdir"/usr/share/applications/ "$pkgdir"/usr/share/dbus-1/system.d/ "$pkgdir"/opt/pulsesecure/lib/JUNS/interfaces
   ln -s /opt/pulsesecure/resource/pulse.desktop "$pkgdir"/usr/share/applications/pulse.desktop
   ln -s /opt/pulsesecure/lib/JUNS/net.psecure.pulse.conf "$pkgdir"/usr/share/dbus-1/system.d/net.psecure.pulse.conf
   for f in $(find opt/pulsesecure/lib/JUNS/interfaces -type l); do
       ln -s $(readlink $f) "$pkgdir"/"$f" ;


Skingrende commented on 2021-12-03 16:51 (UTC)

Seems like 9.1r12 is not online anymore.

==> ERROR: Failure while downloading

Correct URL for r13 is

shyamkm commented on 2021-12-01 06:47 (UTC)

9.1R13 works even for 2FA. I had problems with repeated prompts of 2FA and no success with VPN connection with earlier versions. But did build 9.1R13 version, as suggested by bodograumann, and it worked.

bodograumann commented on 2021-11-18 07:33 (UTC)

Here is the version 9.1r13 provided by Uni Lübeck:




Please incorporate these changes.

project0 commented on 2021-11-15 08:53 (UTC)

Looks like there is already r13:

Does anyone know a download URL? :D

iyanmv commented on 2021-11-12 19:05 (UTC)

This is broken for me right now. It used to work, though.

bidulock commented on 2021-11-11 20:18 (UTC)

need to add a tmpfiles.d entry to create /var/lib/pulsesecure/pulse so that the connection store works correctly

0BAD-C0DE commented on 2021-10-13 13:34 (UTC) (edited on 2021-10-13 14:08 (UTC) by 0BAD-C0DE)

@nunopinheiro I found out a number of minor issue plus a major one.

The application is trying to access the CA store at "/etc/pki/ca-trust/extracted/openssl/". My system has it in "/etc/ca-certificates/extracted/". I had to create /etc/pki and then add a couple of symlinks in there to make it compatible with what Pulse is expecting.

Second problem comes from the cef-browser cache and cookies. I had to manually clean it up under ~/.pulsesecure/cef. I removed "Cache", "Code Cache" directories as well as all ".org.chromium.Chromium*" and "Cookies" files.

@thecrow also spotteed another issue.

I just found this:


thecrow commented on 2021-10-06 13:10 (UTC)

@Syzygianinfern0 You must create the /var/lib/pulsesecure/pulse/ directory which is where the connections are saved.

nunopinheiro commented on 2021-10-06 09:15 (UTC)

@0BAD-C0DE seams like my it kde/plasm related have you tried on a different desktop?

0BAD-C0DE commented on 2021-10-06 07:55 (UTC)

It seems not to work for me under KDE/Plasma. Despite I have installed the package and have started the service, the app doesn't connect nor it gives any feedback. Any hint?

nunopinheiro commented on 2021-09-29 11:36 (UTC) (edited on 2021-09-29 11:47 (UTC) by nunopinheiro)

pulseUI does not show up. I can make it appear by killing the pulsesecure service but it gets "blocked" (cant interact with mouse) again after pulsesecure service restarts

on the other end if I try version 9.1r9 pulseUi gives me a segfault coredump ;(

chiwanpark commented on 2021-09-26 13:18 (UTC)

@hugojosefson @schui The binary from official link also does not work with 2FA.

chiwanpark commented on 2021-09-26 13:16 (UTC)

@hugojosefson The link you gave does not contain download links to 9.1R12.

hugojosefson commented on 2021-09-26 12:41 (UTC) (edited on 2021-09-26 12:44 (UTC) by hugojosefson)

I agree with @schui; Current download link doesn't work.

@chiwanpark Please update PKGBUILD to use the official download links that I described in my previous comment

Here is the oneliner again, to find the official download url:

curl -s | awk -F '"' '/{print $4}'

schui commented on 2021-09-26 12:15 (UTC)

Doesn't work anymore, downloadlink isn't reachable.

Syzygianinfern0 commented on 2021-09-25 16:47 (UTC)

For some reason connection profiles that are added get removed automatically after a reboot. Is this expected?

linxpert commented on 2021-09-25 05:06 (UTC)

Although I cannot provide a solution for the MFA issue here, there is some hope nonetheless. In some unoffical R13 build from PulseSecure we got our MFA issue solved. I've asked whether this will be part of the next release but got no definitive answer.

chiwanpark commented on 2021-09-23 13:38 (UTC)

@Syzygianinfern0 Check the manual. Note that you cannot connect to VPN through CLI if the organization requires MFA or other authentication methods.

Syzygianinfern0 commented on 2021-09-23 13:34 (UTC)

@chiwanpark How do you connect through CLI?

krich commented on 2021-09-23 13:24 (UTC)

I have the same issue as everyone else it looks like. I have been trying to get my MFA (web) login to work since the update was made in Feb. I have followed everything on this thread and nothing seems to work. I am running the 5.4 kernel on Manjaro i3wm. It is starting to look like the only option would be to rollback to the 9.1r9 release. Seeing "Connection Error: Authentication rejected by server. (Error:1319)". Any suggestions would be appreciated.

chiwanpark commented on 2021-09-22 07:29 (UTC)

@OBAD-C0DE thanks for suggestion. however, the packages you suggested are not required packages. They are optional dependencies to use Pulse Secure UI. If a user wants to connect VPN through CLI client, the packages are not required.

0BAD-C0DE commented on 2021-09-16 13:22 (UTC)

Currently it is missing a few dependencies: - gtkmm3 - libwebkit2gtk - webkit2gtk

Once installed it will start and then dump the core when hovering on the "modify" item icon or selecting the File->Connections menu.

project0 commented on 2021-08-30 10:04 (UTC)

I have the same problem as @gorilladeezy, I cannot get MFA (web) login working. It stuck in a login loop in the embedded webkit browser :-(. Apparently the update did not help, i would appreciate any suggestions how to fix.

gorilladeezy commented on 2021-08-27 18:07 (UTC)

@chiwanpark thank you very much for the help

chiwanpark commented on 2021-08-25 00:53 (UTC)

@gorilladeezy, @hughjosefson Sorry for late response. I'll update this package to latest in today.

gorilladeezy commented on 2021-08-24 23:40 (UTC) (edited on 2021-08-24 23:41 (UTC) by gorilladeezy)

Is there any way this can be updated to 9.1r12? I believe that version fixes the pulseUI MFA issue. That's the current issue I am having where after approving the MFA sign-in, it re-directs right back to the sign-in window

hugojosefson commented on 2021-07-27 14:33 (UTC)

Please update download URL (source_x86_64) to the official download URL from the Pulse Secure website.

For the current version, that would be:


(md5sums_x86_64 stays the same.)

Here is how you can see that the above is actually the official URL:

  2. Click FREE TRIAL ->
  3. Click → Looking for Pulse Client to download? -> -> redirects to (Apparently, Ivanti bought Pulse Secure in 2020)
  4. Fill in the form with something and Submit -> redirects to
  5. Copy URL from relevant download button.

Shortcut for getting download URL:s later, without web browser or forms:

curl -s | awk -F '"' '/{print $4}'


tchung commented on 2021-06-10 03:50 (UTC)


This will fix SSL Cert issue connecting to VPN server Otherwise, you might see following message:

You are about to authenticate to an untrusted server.
There are problems with the site's security certificate
Certificate Error
Should Pulse continue to connect?
[Ok] [Cancel]

Syzygianinfern0 commented on 2021-06-10 02:13 (UTC)

@tchung What does this fix?

tchung commented on 2021-06-10 01:15 (UTC) (edited on 2021-06-10 01:17 (UTC) by tchung)

In my case (Manjaro 21 Gnome), I had to:

$ pkill pulseUI
$ sudo mkdir -p /var/lib/pulsesecure/pulse
$ sudo trust extract-compat
$ sudo mkdir -p /etc/pki/ca-trust/extracted/openssl
$ sudo ln -s /etc/ca-certificates/extracted/ /etc/pki/ca-trust/extracted/openssl/
$ systemctl restart pulsesecure.service

akb825 commented on 2021-05-11 22:21 (UTC)

Am I correct in assuming that updating this package means "google search some random site that allows public downloads?" If so, then appears to have the latest version. (

akb825 commented on 2021-05-11 19:56 (UTC)

If you have a DNS service enabled (such as systemd-resolvd) the VPN won't work: it'll claim to be connected, but won't route traffic properly. You will need to use NetworkManager's builtin DNS resolver instead. If you're using a DNS service currently, to switch back you'll need to not only disable the service but also remove /etc/resolv.conf. NetworkManager will see the symlink in /etc/resolv.conf and still think you're using a separate DNS service otherwise.

klden commented on 2021-04-28 14:54 (UTC)

Hi @Syzygianinfern0,

I left a comment here:

Based on strace run, seems like there's a bug in pulse-secure 9.1r11.0.

Syzygianinfern0 commented on 2021-04-25 14:59 (UTC)

The VPN works fine but after a few minutes of connection, it disconnects and the VPN profile that was added is deleted as well. Are there any logs that I can share to debug this issue? Or is it a known issue?

shyamkm commented on 2021-04-19 17:23 (UTC)

Installed pulse-secure9.1r11, and followed the setup instructions as mentioned by @andrea.denisse and @thecrow. But, still have issues with PulseUI, keeps refreshing the login screen where it asks for the second factor auth. Doesn't go forward to host checking and establishing VPN.

Arch_mimoace commented on 2021-04-04 02:31 (UTC)

Wondering what is the issue with Pulse UI, keeps refreshing the login page! rebuilding webkitgtk did not help solve the problem. What I'm missing here?

paragordius commented on 2021-04-02 17:30 (UTC)

Does this latest version do away with the pulsesvc command?

denisse commented on 2021-03-12 01:49 (UTC)

Hello everyone,

Apparently pulse-secure requires NetworkManager to work properly. Once I installed NetworkManager and started the NetworkManager daemon the Failed to setup virtual adapter. went away for me.

The VPN is working good now, thanks for maintaining this package and thanks @thecrow for your support!

commented on 2021-03-11 18:40 (UTC)

thecrow is definetly the man ... great support!

denisse commented on 2021-03-10 17:21 (UTC) (edited on 2021-03-10 17:23 (UTC) by denisse)

Thanks @thecrow, that worked.

I'm getting this message:

Connection Error
Failed to setup virtual adapter. (Error:1205)   
Restart your system and try again. If the problem persists, contact your network administrator.

Another thing I've noticed is that for some reason the VPN stays in some kind of a loop where it keeps iterating over the following messages:

Checking Compliance
Securing Connection

Do any of you know how to fix it?

thecrow commented on 2021-03-10 13:20 (UTC)

@adrea.denisse The symbolic link you created is not correct, you must create:
sudo ln -s /etc/ca-certificates/extracted/ /etc/pki/ca-trust/extracted/openssl/

denisse commented on 2021-03-09 17:33 (UTC)

Hi, I'm having a lot of troubles with CA Certificates.

I ran the following steps as recommended by other users:

  1. sudo mkdir -p /var/lib/pulsesecure/pulse
  2. trust extract-compat
  3. sudo ln -s /etc/ca-certificates/extracted/ /etc/ca-certificates/extracted/openssl/
  4. systemctl start pulsesecure.service

But I'm still getting the "You are about to aunthenticate to an untrusted server" error. Do any of you have an idea of what I could be doing wrong?

tomek2102 commented on 2021-03-08 08:57 (UTC)

After system restart it has started working :)

tomek2102 commented on 2021-03-04 05:51 (UTC)

@chiwanpark Yes, I have started it.

chiwanpark commented on 2021-03-04 05:48 (UTC)

@tomek2102 did you start the service named 'pulsesecure'? 9.1R11 requires the service. you need to start the service before running the client.

tomek2102 commented on 2021-03-04 05:29 (UTC)

Hi, I'm trying to get it working too but I have following problem:

DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files

The UI sometimes starts but I cannot create connection and connect. I have created dir and symlink but without any change. What can be wrong? The client version between last November and December was working OK.

wwinfrey commented on 2021-03-02 22:44 (UTC)

After reading thecrow's comments I created the missing /var/lib/pulsesecure/pulse directory:

$ sudo mkdir -p /var/lib/pulsesecure/pulse

and created a symlink:

$ sudo ln -s /etc/ca-certificates/extracted/ /etc/pki/ca-trust/extracted/openssl/

and now I am able to connect, so some might attempt these steps before reverting.

I also did not need to restart the pulsesecure service, pulselauncher worked after the symlink and directory were created.

I extracted the RPM spec file from pulsesecure-9.1-R11.x86_64.rpm using rpmrebuild and found that:

$ mkdir -p /var/lib/pulsesecure/pulse

was in the %post section of the extracted SPEC but is not in the PKGFILE. The symlink needs to be created because this is where redhat/centos/etc distros store CA bundles, and thus where the pulse package expects it to be, as evidenced by running strings on the pulselauncher binary and grepping for .crt:

$  strings /opt/pulsesecure/bin/pulselauncher | grep "[.]crt"

commented on 2021-02-26 08:27 (UTC)


THAT was really really helpful, thanks a lot. Now, my pulse client works like a charm ...

thecrow commented on 2021-02-26 07:24 (UTC) (edited on 2021-02-26 07:26 (UTC) by thecrow)


To resolve the certificate warning, pulsesecure will look for the certificate authorities in the path /etc/pki/ca-trust/extracted/openssl, add the symbolic link:

/etc/pki/ca-trust/extracted/openssl/ -> /etc/ca-certificates/extracted/

The connections are saved in /var/lib/pulsesecure/pulse, you have to create the directory so that pulsesecure can save them and they are not lost when restarting the service.

commented on 2021-02-25 17:17 (UTC)

Ok, installed the new 9.1R11 and ran systemctl enable pulsesecure && systemctl start pulsesecure - afterwards restarted arch:


  1. pulseUI works
  2. adding a connection works
  3. connecting works

but ...

  1. i always get a cert warning, although i imported the needed ca with trust anchor an so on ... (but this is probably my problem)

BUT ...

  1. if the pulsesecure.service is restarted, the gui looses all the connections ... that is weird.

Any ideas?

Regards, A.

je-vv commented on 2021-02-25 05:38 (UTC)

@chiwanpark thanks for keeping the old package available at least through drive. I can't use new versions if they keep depending on systemd. I notice the service just calls another script, and I tried:

sudo /opt/pulsesecure/bin/ start

To then execute:


But even by doing so, I can't add new connections, neither connect...

If someone finds a way to make pulse-secure work without systemd, please let me know. It might require several calls, as I was trying, no problem... Not sure if I'd need to call some dbus stuff, which I'm not familiar with...

For now I need to keep using the old 9.1.r9 version with the curl-pulse-secure package...

chiwanpark commented on 2021-02-24 10:22 (UTC) (edited on 2021-02-24 10:23 (UTC) by chiwanpark)

@abyss02 I've updated the package to new version 9.1r11. It seems that the curl problem disappears. However, the host checker still does not work properly.

chiwanpark commented on 2021-02-24 10:21 (UTC)

If you want to use old pulse-secure client 9.1r9, please download the following package.

The rewritten pulse-secure client requires a service called 'pulsesecure'. Please enable and start the service before running the client.

mattonthehill commented on 2021-02-23 08:19 (UTC)

@je-vv, you could probably make it work without systemd. The systemd control file makes a call to a simple shell script with "do_start" and "do_stop" functions to run/kill a binary, so I expect it could be made compatible with non-systemd systems.

commented on 2021-02-22 18:21 (UTC)

Hey there, there is a new version 9.1R11 with this changelog:

It can be downloaded here:

Seems that they had some issues with host checker.

Will you give it another try? Or could you please provide the PKGBUILD of your 9.1R10-Package?

Regards, A.

thecrow commented on 2021-02-22 12:30 (UTC) (edited on 2021-02-22 12:45 (UTC) by thecrow)

I downloaded the latest version 9.1R11, after manually copying the files over version 9.1R10, the VPN is established, it already works with curl 7.75.

je-vv commented on 2021-02-17 20:46 (UTC)

@treizeku, you moved way back, to 9.1r8.0_b165 actually, while current version is 9.1r9.0_b255. Those old versions don't require any service, you just call the pulsesvc for command line or you just call the pulseUI binary for the gui... That was the old model... However not sure why 9.1r9.0_b255 is not working for you. I'd guess the really new one, on the GDrive provided by @chiwanpark is the one having some future, and it's pending solving some issues prior to releasing, but not so bright at least for me, since it depends on loading a systemd service it seems...

treizeku commented on 2021-02-17 12:25 (UTC)

Ran into the same problem as most people. The package stopped working after the latest upgrade. I tried a lot of different things, including the experimental package of the latest version by @chiwanpark, but I also couldn't get it to work. The main problem was that it was not able to create the virtual interface for some reason.

I did however got my VPN to work again by downgrading back to an older package, even though it didn't work at first. I think a reboot fixed it. So for people who really need to get it to work:

After that maybe reboot to be sure but that version works again for me. Not sure if the curl-pulse-secure libraries are still necessary with this. I don't need to start any service or anything.

thecrow commented on 2021-02-12 11:08 (UTC) (edited on 2021-02-12 12:22 (UTC) by thecrow)

After installing the 9.1R10 version package, I had to install the following packages libbsd, gtkmm3 and webkit2gtk to work that I did not have in my installation.

When adding my connection I have seen the following errors in the log.

root /opt/pulsesecure/bin/pulsesecure ConnectionStore p0226 tE2 ConnectionStoreDocSet.cpp: 562 - 'ConnectionStoreService' SaveDocument: /var/lib/pulsesecure/pulse/connstore.dat
root /opt/pulsesecure/bin/pulsesecure ConnectionStore p0226 tE2 ConnectionStoreDocSet.cpp: 568 - 'ConnectionStoreService' Failed fopen: 2 /var/lib/pulsesecure/pulse/connstore.tmp

When trying to connect to my connection, it gives an error when verifying the certificate, the following message appears in the log:

user /opt/pulsesecure/bin/pulseUI pulseUI p48165 tBC3D linuxCert.cpp: 1318 - 'JamCertLib' getSystemInfo: Linux 5.10.15-arch1-1 # 1 SMP PREEMPT Wed, 10 Feb 2021 18: 32: 4 0 +0000 x86_64
user /opt/pulsesecure/bin/pulseUI pulseUI p48165 tBC3D linuxCert.cpp: 1339 - 'JamCertLib' Certificate CA store file: /etc/pki/ca-trust/extracted/openssl/
user /opt/pulsesecure/bin / pulseUI pulseUI p48165 tBC3D linuxCert.cpp: 1356 - 'JamCertLib' Failed to load CA certs. verifyTrust failed

After creating the directory /var/lib/pulsesecure/pulse, and the symbolic link /etc/pki/ca-trust/extracted/openssl/ -> /etc/ca-certificates/extracted/ca

When trying to connect it stays in a loop, conecting -> securing connection

On the terminal there are continually messages: DBUS api call failed with code: 2 - message: GDBus.Error: org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files

The following error appears in the log:

root /opt/pulsesecure/bin/pulsesecure dsTMService p49941 tC343 tunnel2.cpp: 197 - 'TM' Initialize (): ERROR: Create I_IPSecSystemMgr failed 0xe0020026

The HostChecker seems to terminate well root /opt/pulsesecure/bin/pulsesecure HostCheckerService p0226 tB E43 TnccLink.cpp: 142 - 'NotifyConnectionChange' Host check finished, result for connection 0x1 on NAR 0x132d481, new state Open ': Success'

The error seems to be when trying to create the virtual network adapter.

chiwanpark commented on 2021-02-06 12:06 (UTC)

@abyss02 I've already packaged the new client, and posted it to the previous comment ( with test request.

I'm struggling with the failure of host checker in 9.1r10. After fixing the failure, I'll upload the new package.

commented on 2021-02-06 11:04 (UTC)

hey, can you please provide the new client 9.1.R10, you can find it here:

je-vv commented on 2021-02-06 03:57 (UTC)

Do we need a service to start puilse-secure now? Ohh boy... But I don't think the seg faulting using the backported libs, are due to that, do you @chiwanpark?

BTW, I don't think I can test any time soon then, if systemd is required, since I use Artix, so I'd need to port the service to S6, which is the init+supervisor system I use. So if the package moves to a newer release (I see it worked for @mattonthehill) I'll have to stick with the 7.73.0, until porting the service, or finding a work around by using openconnect somehow. I understand openconnect doesn't handle pulse MFA, but perhaps some people out there is doing magic with it...

chiwanpark commented on 2021-02-06 03:41 (UTC)

@mattonthehill: Thanks for your testing. :)

@je-vv: from 9.1R10, you need to start pulsesecure.service via sudo systemd start pulsesecure.service. The message DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files is shown because the service is not running.

I will automatically enable the service after updated package. Thanks for reporting.

je-vv commented on 2021-02-06 03:29 (UTC)

@thecrow, I don't know what else to put in there, they don't accept the fact the package got broken.

@chiwanpark, I tested the binary package you made available with 9.1r10.0_b5655, without reverting curl, neither changing LD_LIBRARY_PATH, and it just seg faults without any output:

% /opt/pulsesecure/bin/pulseUI
Segmentation fault

And by using the backported libraries provided by curl-pulse-secure thorough LD_LIBRARY_PATH, it still seg faults, though the gui shows up for a bit less than a second:

% export LD_LIBRARY_PATH="${LD_LIBRARY_PATH}:/usr/local/pulse"
% /opt/pulsesecure/bin/pulseUI
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
Segmentation fault

So now, things look way worse than before, because it seg fauls no matter if using the backported libraries or not...

Running without backported libs with gdb shows:

% gdb /opt/pulsesecure/bin/pulseUI
Reading symbols from /opt/pulsesecure/bin/pulseUI...
(No debugging symbols found in /opt/pulsesecure/bin/pulseUI)
(gdb) run
Starting program: /opt/pulsesecure/bin/pulseUI 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff09aff7e in __strcmp_avx2 () from /usr/lib/
(gdb) bt
#0  0x00007ffff09aff7e in __strcmp_avx2 () at /usr/lib/
#1  0x00007ffff12dacbb in lh_insert () at /opt/pulsesecure/lib/dsOpenSSL/
#2  0x00007ffff123c994 in OBJ_NAME_add () at /opt/pulsesecure/lib/dsOpenSSL/
#3  0x00007fffeca0e021 in  () at /usr/lib/
#4  0x00007ffff7f7918f in __pthread_once_slow () at /usr/lib/
#5  0x00007fffec8e54ea in CRYPTO_THREAD_run_once () at /usr/lib/
#6  0x00007fffeca0e224 in OPENSSL_init_ssl () at /usr/lib/
#7  0x00007fffecb40731 in  () at /usr/lib/
#8  0x00007fffecaf3735 in  () at /usr/lib/
#9  0x00007ffff7fe12de in call_init.part () at /lib64/
#10 0x00007ffff7fe13c8 in _dl_init () at /lib64/
#11 0x00007ffff098d0e5 in _dl_catch_exception () at /usr/lib/
#12 0x00007ffff7fe5705 in dl_open_worker () at /lib64/
#13 0x00007ffff098d088 in _dl_catch_exception () at /usr/lib/
#14 0x00007ffff7fe4f3e in _dl_open () at /lib64/
#15 0x00007ffff7f6334c in  () at /usr/lib/
#16 0x00007ffff098d088 in _dl_catch_exception () at /usr/lib/
#17 0x00007ffff098d153 in _dl_catch_error () at /usr/lib/
#18 0x00007ffff7f63b89 in  () at /usr/lib/
#19 0x00007ffff7f633d8 in dlopen () at /usr/lib/
#20 0x00007fffed1161ac in  () at /usr/lib/
#21 0x00007ffff7fe12de in call_init.part () at /lib64/
#22 0x00007ffff7fe13c8 in _dl_init () at /lib64/
#23 0x00007ffff7fd20ca in _dl_start_user () at /lib64/
#24 0x0000000000000001 in  ()
#25 0x00007fffffffdbde in  ()
#26 0x0000000000000000 in  ()

So there you go, there are still issues with the curl library...

And doing the same using LD_LIBRARYPATH with the backported curl libraries:

% gdb /opt/pulsesecure/bin/pulseUI
Reading symbols from /opt/pulsesecure/bin/pulseUI...
(No debugging symbols found in /opt/pulsesecure/bin/pulseUI)
(gdb) run
Starting program: /opt/pulsesecure/bin/pulseUI 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/".
[New Thread 0x7fffec007640 (LWP 7998)]
[New Thread 0x7fffeb806640 (LWP 7999)]
[New Thread 0x7fffeaec0640 (LWP 8000)]
[New Thread 0x7fffec0a6a40 (LWP 8001)]
[New Thread 0x7fffea6bf640 (LWP 8003)]
[New Thread 0x7fffe9ebe640 (LWP 8004)]
[New Thread 0x7fffe88da640 (LWP 8005)]
[New Thread 0x7fffd3fff640 (LWP 8006)]
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
[Thread 0x7fffe88da640 (LWP 8005) exited]
[Thread 0x7fffd3fff640 (LWP 8006) exited]
[New Thread 0x7fffd3fff640 (LWP 8007)]
[Thread 0x7fffe9ebe640 (LWP 8004) exited]
[Thread 0x7fffea6bf640 (LWP 8003) exited]
[New Thread 0x7fffea6bf640 (LWP 8010)]
[New Thread 0x7fffe9ebe640 (LWP 8011)]
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 
DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files 

Thread 11 "pulseUI" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffea6bf640 (LWP 8010)]
0x00007ffff09b7ee1 in __memset_avx2_erms () from /usr/lib/
(gdb) bt
#0  0x00007ffff09b7ee1 in __memset_avx2_erms () at /usr/lib/
#1  0x0000555555554ccc in  ()
#2  0x0000555555550495 in GetDSAccessServiceInterface(pincGuid const&, unsigned int, void**) ()
#3  0x0000555555550586 in DSAccessGetPluginInterface(char const*, pincGuid const&, unsigned int, void**) ()
#4  0x000055555551bb3e in DialogManager::InitiateJUNS() ()
#5  0x000055555552436f in DialogManager::OnJamTimer(unsigned int) ()
#6  0x0000555555507c1b in CJamCommandListProcessor::OnJamTimer(unsigned int) ()
#7  0x00007ffff7f5d63c in  () at /usr/lib/
#8  0x00007ffff7f713e9 in start_thread () at /usr/lib/
#9  0x00007ffff0952293 in clone () at /usr/lib/

Then there are issues with glibc...

And the community forum seems totally useless to me, as well as the comments some of those guys have included in the github issue... Whether saying got get support with a big shot guy doing business with them, or just install a newer version, which is just as useless, when never getting to debug what's broken. It's really tiresome to try arguing with them.

mattonthehill commented on 2021-02-05 20:36 (UTC)

Thanks for your package @chiwanpark - I managed to connect to my workplace's VPN, after the following steps:

  • Install curl-pulse-secure;
  • Start the pulsesecure service;
  • Run PulseUI with "LD_LIBRARY_PATH=/usr/local/pulse pulseUI"

It still complains quite a lot, but it worked and let me set up a connection. Thanks again!

thecrow commented on 2021-01-26 12:59 (UTC)

@chiwanpark,@je-vv Podeis actualizar la información que solicitan desde el foro de pulse secure, para replicar el problema con curl 7.74

je-vv commented on 2021-01-23 22:56 (UTC)

@chiwanpark, although 9.1R10 does not fix the curl related segfault, I see it positive if you update the package any ways. Thanks a lot !

je-vv commented on 2021-01-23 22:53 (UTC)

BTW, on all 3 posts under the pulse-secure comuniy forum where I'm involved, the answer is always to get a big shot on business relations with pulse-secure, to get in contact with them. So I guess there won't be any support from pulse-secure to final users on the issues their own SW generates. There's NO way to reach out to their devs or support team. I don't have any alternative, given the company where I work chose pulse-secure and uses MFA even requiring its GUI, which depends on obsolete and insecure webkitgtk.

I guess the work around with curl-pulse-secure is all there will be, until everything starts segfaulting on other platforms with more users, like redhat derivatives and debian/ubuntu derivatives, which can influence big shots from IT making business with them. That's to be expected from closed source SW I'd guess... How disappointing !!

tryax commented on 2021-01-21 09:46 (UTC)

/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

lib32-icu has been updated to 68.2-1, so pulse can't find version 67?

chiwanpark commented on 2021-01-19 15:46 (UTC)

@je-vv: the 9.1R10 does not fix the curl related crash. I guess that the user posting 9.1R10 works with curl 7.74 in Ubuntu did test with OpenSSL < 1.1.0. I've posted the question about OpenSSL version to the forum.

chiwanpark commented on 2021-01-19 15:41 (UTC) (edited on 2021-01-19 15:46 (UTC) by chiwanpark)

@je-vv and other users: I've packaged the new 9.1R10 client. However, in my testing environment host checker does not work properly. Thus, I didn't upload the package to AUR repository. But I request for someone to test the package. (You need to install curl 7.73 to run this package)

Any reports are welcome.

chiwanpark commented on 2021-01-19 10:59 (UTC)

@je-vv I'm trying to upgrade this package to the 9.1R10 release, but it takes more time than the previous version. In 9.1R10, Pulse Secure client are totally rewritten.

je-vv commented on 2021-01-18 21:08 (UTC)

@chiwanpark and @yan12125, according to, latest version of 9.1R10 should have fixed the curl issue, and then curl-pulse-secure wouldn't be needed... Can you please upgrade?

bakgwailo commented on 2021-01-15 20:35 (UTC) (edited on 2021-01-15 20:44 (UTC) by bakgwailo)

@andrea.denisse @hedin504

edit: nevermind, fixed the segfault by installing the curl-pulse-secure AUR package.

microdou commented on 2021-01-11 13:41 (UTC)

Using curl-pulse-secure is the best solution. Don't use soft link!

JL55 commented on 2021-01-10 06:56 (UTC)

Can confirm the workaround @bidulock suggested works: Copy the (and the soft links and of package curl-7.73.0-1 to /usr/local/pulse/ solved the segmentation fault issue.

For the icu problem, I installed the latest webkitgtk binary package ( and everything works.

bidulock commented on 2021-01-06 08:30 (UTC)

I added package curl-pulse-secure to the AUR that installs binary libcurl library from curl 7.73.0-1 into /usr/local/pulse. Using this package will get rid of core dumps. Might add it to depends until curl or pulse is fixed.

bidulock commented on 2021-01-06 08:02 (UTC)

@SJrX pulseUi is already executed with a LD_LIBRARY_PATH. It is sufficient to copy from curl-7.73.0-1 to /usr/local/pulse Then you can have a fully up to date system. But thanks for the approach!

hedin504 commented on 2021-01-06 07:58 (UTC) (edited on 2021-01-06 07:59 (UTC) by hedin504)

@andrea.denisse I have the same problem

denisse commented on 2021-01-06 00:21 (UTC)

I tried this package and compiled webkitgtk, when I try to execute pulseUi I get a segmentation fault (core dumped) pulseUi error.

Is anyone else experiencing this problem?

je-vv commented on 2021-01-04 22:16 (UTC)

BTW @SJrX, I just tried with my laptop totally up to date, both from official repos and AUR, and everything worked out just fine, no need to rebuild webkitgtk. The last change on webkitgtk ( "Patching for build with icu 68.2") was precisely about adding a "68.2" icu patch. Not sure, if from 10 days ago to Today, some libs might have changed preventing webkitgkt to build again, but around those 10 days ago, building it had no issues. Perhaps you could try the binary as well.

I'll be posting something about migrating to webkit2gtk on the pulse-secure forums, but it seems no devs pay attention to that. I have no clue why on earth pulse-secure still depends on webkit1 for webui support... I'll also be posting about how to accomplish webui MFA from the command line, to see if the users have gotten that solved, and stop using obsolete webkitgtk...

je-vv commented on 2021-01-04 21:31 (UTC)

@SJrX, I see, I haven't had to rebuild webkitgtk since its last rebuilt needed like a week and a couple of days more ago. I'll just try it again. But your backporting solutions looks fine to me. Actually at least the curl one seems like a good temporal work around that could be implemented in this same pulse-secure package, while upstream fixes the curl issue.

SJrX commented on 2021-01-04 21:26 (UTC) (edited on 2021-01-04 21:27 (UTC) by SJrX)

@je-vv at the moment, webkitgtk can't be rebuilt is my understanding, and my thing failed today. I didn't try with webkitgtk-bin.

I can't speak to anything about changing the internal package, I am doing a hack just to work around the issue. If people more knowledgable than me want to use it, then all the better :)

je-vv commented on 2021-01-04 21:23 (UTC) (edited on 2021-01-04 21:27 (UTC) by je-vv)

@SJrX, according to the pinned messages, on both pulse-secure and webkitgtk, the icu version change, only requires webkitgtk to rebuild, no need to backport icu, or revert it. Tough I agree rebuilding takes a huge amount of time. I'd love to stop needing the pulse-secure GUI just for MFA. The curl issue though, does require wether backporting or reverting curl. BTW, I like your backporting solution, and I'm wondering if that could be incorporated temporally (while there's no new pulse-secure version with the fix to work with newest curl), into the pulse-secure AUR package itself, not as a directory in $HOME, but rather being part of "/usr/local/pulse". Notice /usr/bin/pulseUi wouldn't need any modification, since it already modifies LD_LIBRARY_PATH accordingly, but /usr/bin/pulsesvc might need to be moved to "/usr/local/pulse", and a bash or shell wrapper (/usr/bin/pulsesvc_wrapper) is needed around it, changing LD_LIBRARY_PATH in it.

Perhaps @yan12125 or @chiwanpark can take a look. But at any rate, for the curl issue, I'd recommend users to push to the pulse-secure company, since they are the ones to finally fix the issue.

Moreover, if the company (upstream) is also pushed to use webkit2gtk, rather than the old obsolete and insecure webkitgtk, that would be much better...

SJrX commented on 2021-01-04 20:48 (UTC)

So I had two issues that prevented this from working today. The first is that icu ( has been upgraded, the second is the curl issues with 7.74, in previous comments.

icu and especially curl have lots of dependencies so it didn't seem smart to downgrade them. What I did was I found the previous archives, and unzipped them somewhere, then used LD_LIBRARY_PATH to use the old versions. You can get the old versions from the Arch Linux Archive, here are some examples.

mkdir -p ~/old_versions cd ~/old_versions wget wget

At this point you should validate the signatures for the packages.

Then unarchive them: tar -I zstd -xvf curl-7.73.0-1-x86_64.pkg.tar.zst tar -I zstd -xvf icu-67.1-1-x86_64.pkg.tar.zst

Then export LD_LIBRARY_PATH=/home/<username>/old_versions/usr/lib/:$LD_LIBRARY_PATH

then ran pulseUi and it worked.

CC @je-vv

je-vv commented on 2021-01-04 17:53 (UTC)

@Hubro, I see your comment on, however, strangely enough, it built for me, with its latest change ~10 days ago... I do prefer building it, but have you tried using the binary AUR package ( That might prevent building issues I'd guess..

I do have to use webkitgtk, since I have no clue how to use pulse-secure with MFA on the command line, and that's a must where I work unfortunately, :( However if you don't use the multi factor authentication, and use an OTP instead, or similar non multi factor auth, then you can get away with using the pulse-secure command line. I used it for several years, without even having webkitgtk installed... An usage example:

pulsesvc -h ${GATEWAY} -u ${USER} -p ${OATH_PIN_PASS} -r "OATH Passcode"

But it all depends on what the org needing you to use this privative SW requires...

Hubro commented on 2021-01-04 08:41 (UTC)

I'm no longer able to use this package since AUR's webkitgtk package will no longer compile. Does anybody else have this issue? Is there a workaround that avoids using the AUR webkitgtk package? Or have any of you succeeded in building it?

lindbergio commented on 2020-12-22 09:52 (UTC)

@chiwanpark: There's a newer version, 9.1.R10. But it seems it hasn't been updated for the trial downloads.

chiwanpark commented on 2020-12-21 12:08 (UTC)

@lindbergio yes, they rewrote the application and released it as 9.1r9.0_b4983. however, b4983 also crashes with curl 7.74.

lindbergio commented on 2020-12-21 11:09 (UTC)

Seems like Pulse Secure did a re-write of the pulse application. It seems that they changed the package name from "pulse" to "pulsesecure" as well.

jsermer commented on 2020-12-18 14:50 (UTC)

I posted into their community support forums to hopefully bring some sort of awareness to this issue:

je-vv commented on 2020-12-14 17:59 (UTC)

I don't see how to contact any one from to help solve the issue, anyone knows? Have anyone tried contacting pulsesecure guys?

je-vv commented on 2020-12-14 17:47 (UTC)

You can also get old versions of packages from the archive,

BTW, the error I'm seeing although getting fixed by downgrading curl, is a bit different from the one posted in the curl issue. IT seems like having issues parsing some openssl confg file:

futex(0x7f7f7ed3e818, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e80c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e804, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e8f8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e7f0, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e7e8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3bc5c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e6c4, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e65c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e650, FUTEX_WAKE_PRIVATE, 2147483647) = 0
brk(0x1d3c000)                          = 0x1d3c000
futex(0x7f7f7ed3e7fc, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e7b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7f7f7ed3e7b0, FUTEX_WAKE_PRIVATE, 2147483647) = 0
openat(AT_FDCWD, "/etc/ssl/openssl.cnf", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=10909, ...}) = 0
read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
read(3, "# WARNING: ancient versions of N"..., 4096) = 4096
read(3, "es of the usage of nsCertType. I"..., 4096) = 2717
read(3, "", 4096)                       = 0
close(3)                                = 0
futex(0x7f7f7ed3e7e0, FUTEX_WAKE_PRIVATE, 2147483647) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
+++ killed by SIGSEGV +++
Segmentation fault

That gotten from strace, bacause the only message gotten when running pulse is "Segmentation fault"

chiwanpark commented on 2020-12-13 06:06 (UTC)

@anatolik I have the same issue you reported. I've temporarily downgraded curl to 7.73 via downgrade package. (

anatolik commented on 2020-12-12 19:21 (UTC)

I see following issue with this package

Does anybody see it as well?

Hubro commented on 2020-11-10 15:21 (UTC) (edited on 2020-11-10 15:22 (UTC) by Hubro)

The patch needs to be updated for 9.1r9-0. Specifically the SUPPORTED_OSTYPES_LIST line:

--- usr/local/pulse/   2020-04-03 15:17:07.000000000 +0900
+++ usr/local/pulse/   2020-05-05 22:51:10.170118991 +0900
@@ -17,7 +17,7 @@

 SCRNAME=`basename $0`

 #RPM Based
                         nss-softokn-freebl \
@@ -305,6 +305,8 @@
+    elif [ -f /etc/arch-release ]; then
         OSNAME=$(lsb_release -d | grep -o "Ubuntu")
         if [ "X$OSNAME" != "X" ]; then
@@ -355,7 +357,7 @@
     elif [[ ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_14]}) || \
         ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_15]}) || \
-        ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_16_17_18_19]}) || \
+        ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_16_17_18]}) || \
         ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_19]}) || \
         ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$DEBIAN_10]}) || \
         ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$DEBIAN_8_9]}) ]]; then
@@ -430,7 +432,8 @@
     elif [[ ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_14]}) || \
         ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_15]}) || \
-        ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_16_17_18_19]}) || \
+        ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_16_17_18]}) || \
+        ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$UBUNTU_19]}) || \
         ($OS_TYPE = ${SUPPORTED_OSTYPES_LIST[$DEBIAN_8_9]}) ]]; then

manitua commented on 2020-11-06 18:39 (UTC) (edited on 2020-11-06 21:28 (UTC) by manitua)

@danilopiazza ps-pulse-linux-9.1r9.0-b4983-centos-rhel-64-bit-installer.rpm does not correspond to "right one" from PulseSecure.


size: 8100608
md5: a89f147d7c243800cb2211dbc15f662f
sha256: ca895bc714c12c02e28b463913995f3f4addfb659e4b4e8e3fa1ca0626e3353d

PulseSecure have this one ps-pulse-linux-9.1r9.0-b255-centos-rhel-64-bit-installer.rpm:

size: 49364144
md5: f727a1d286baba9311be2bc6a7e77293
sha256: af60e99946e16c55ae0e37759968a3b175aadcd3f2d3954e2c120403df65e3de

danilopiazza commented on 2020-11-06 08:13 (UTC)

A new version is available:

commented on 2020-10-22 11:41 (UTC)

Company VPN requires login with eID through browser with extension, but the browser that opens when logging in doesn't allow that (afaik). Is it possible somehow to open the login screen with firefox instead?

anatolik commented on 2020-09-28 21:31 (UTC)

FYI: namcap complains:

pulse-secure E: Dependency libsecret detected and not included (libraries ['usr/lib/'] needed in files ['usr/local/pulse/pulseutil'])

adrianlzt commented on 2020-08-25 11:51 (UTC)

I have

pacman -Qo /usr/lib/
/usr/lib/ is owned by webkitgtk 3:2.4.11-19

cvelteren commented on 2020-08-25 10:54 (UTC)

Getting : /usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

Reinstalling webkit doesn't change this, how do I fix this error?

chiwanpark commented on 2020-08-12 14:21 (UTC)

@tryax Could you try again? The file is downloaded without any failure.

tryax commented on 2020-08-11 05:07 (UTC)

curl: (22) The requested URL returned error: 416 ==> ERROR: Failure while downloading

sim0705 commented on 2020-08-07 06:22 (UTC)

curl: (22) The requested URL returned error: 404 Not Found ==> ERROR: Failure while downloading I think maybe this package need to update the source of .rpm file

fthiery commented on 2020-07-31 09:45 (UTC)


$ /usr/bin/pulseUi /usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

adrianlzt commented on 2020-07-15 08:49 (UTC) (edited on 2020-07-15 08:51 (UTC) by adrianlzt)

I have modified the pulsesvc binary to:

  • do not change /etc/hosts

  • do not change /etc/resolv.conf

  • do not add new routes


slevin commented on 2020-06-24 10:41 (UTC) (edited on 2020-06-24 11:34 (UTC) by slevin)

Does anyone know how to get the correct realm when using pulsesvc directly?

I can login using pulseUi, but now with pulsesvc. I've tried stracing pulsesvc, but I can't find any mention of the realm. Also tried greping the sources of welcome.cgi and login.cgi.

LeCrayonVert commented on 2020-06-06 17:47 (UTC)

Even though I've tried to rebuild webkitgtk, I sill got the following issue when launching pulseUi :

/usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

I've also had to install the package locally with a manually downloaded rpm package in order to make it work (there are some issues with curl and redirects with the given server).

pulsesvc works as expected.

chiwanpark commented on 2020-05-05 14:04 (UTC)

@alogim There was a bug in runner script. I've fixed and uploaded the updated package. Thanks for reporting! :)

alogim commented on 2020-05-05 12:25 (UTC) (edited on 2020-05-05 12:25 (UTC) by alogim)

I guess something got messed up, because when I try to use PulseClient it keeps telling me: Checking for missing dependency packages for command line client ... /usr/local/pulse/ line 477: dpkg-query: command not found sudo password : sudo: apt-get: command not found Failed to install dependencies.Please execute following command manually. apt-get install libc6 executing command : /usr/local/pulse/pulsesvc -host <my host> -user <my user> -password <my password> -realm <my realm>

fprietog commented on 2020-04-29 20:27 (UTC) (edited on 2020-04-29 20:27 (UTC) by fprietog)

@chiwanpark Thanks to you!

BTW: here are the Release Notes for newest version:

chiwanpark commented on 2020-04-29 02:27 (UTC)

@fprietog Thanks for notification! I've updated the package. :)

fprietog commented on 2020-04-28 20:33 (UTC)

New version 9.1R5(151)


chiwanpark commented on 2020-04-16 07:41 (UTC)

@alogim Congrats!

alogim commented on 2020-04-16 07:24 (UTC)

@danilopiazza @chiwanpark I finally managed to find the culprit. I use a manually-written script to connect to NordVPN, where I also set the immutable attribute (+i) on /etc/resolv.conf. I removed that and now I am finally able to successfully connect. strace was a great help, since it reported this openat(AT_FDCWD, "/etc/resolv.conf", O_WRONLY|O_CREAT|O_TRUNC, 0666) = -1 EPERM (Operation not permitted)

danilopiazza commented on 2020-04-10 19:30 (UTC)

@alogim use either strace or ltrace to detect what the host checker is looking for:

strace /usr/local/pulse/pulsesvc -host HOST -user USER -password PASSWORD -realm REALM -Url URL

ltrace /usr/local/pulse/pulsesvc -host HOST -user USER -password PASSWORD -realm REALM -Url URL

For instance, my network's host checker looks for the xinetd process.

chiwanpark commented on 2020-04-10 14:24 (UTC)

@alogim I found the following logs from your uploaded file.

20200410094556.344381 pulsesvc[p48776.t48776] Host checking failed, Required file not found (FileHCRule.cpp:91) 20200410094556.344425 pulsesvc[p48776.t48776] HC policy evaluation response String: policy:vc0|19|policy_3|3|LnxHost status:NOTOK error:Required file not found (HCLinuxImc.cpp:431) 20200410094556.344458 pulsesvc[p48776.t48776] HC policy evaluation response String: policy:vc0|19|policy_3|3|LnxHost status:NOTOK error:Required file not found , hcStatus: 3 (HCLinuxImc.cpp:435)

The logs mean that the VPN server disconnect connection because the client verification has failed. Note that the server can accept only specific linux distribution (CentOS or Ubuntu) via host checker configuration. You may check the host checker configuration from your network administrator.

alogim commented on 2020-04-10 07:49 (UTC) (edited on 2020-04-10 07:50 (UTC) by alogim)

Sure, here it is:

chiwanpark commented on 2020-04-08 13:26 (UTC)

@alogim Could you upload ~/.pulse_secure/pulse/pulsesvc.log? To be clarify the reason easily, please remove the log file first, and attempt to connect your VPN.

alogim commented on 2020-04-08 12:23 (UTC) (edited on 2020-04-08 12:23 (UTC) by alogim)

@chiwanpark I can connect perfectly fine from Ubuntu inside a virtualbox hosted on the same system and with the same connection. So it seems an Archlinux problem. Notice that I tried everything, the RPM, the DEB and the one provided by my company, but on Archlinux I always get that error message and then the application closes.

chiwanpark commented on 2020-04-05 02:50 (UTC)

@aiogim @mvidaldp Could you attempt to connect your VPN in other distro (such as Ubuntu, CentOS) with the RPM (or DEB) from the source site? It seems that the problem is not our packaging, but the bug in pulse-secure client with your VPN configuration.

alogim commented on 2020-03-31 05:34 (UTC) (edited on 2020-03-31 06:09 (UTC) by alogim)

I am unable to connect, I have the same problem reported by user mvidaldp. What happens:

1) I create a new connection

2) Click on the "Connect" button

3) A new window pops up where I enter my credentials (user name and password)

4) I click Sign in

5) The window changes and it says

Loading Components...

Please wait. This may take several minutes.

Host Checker

If an error prevents a component from loading properly, you can click here to continue. Not all functionality may be available.

6) After a few seconds this window closes and it goes back to the original window with the connection

7) Compliance goes from an empty string to "Meets security policies"

8) The window closes with this error in the terminal:

pulseUi: pulseUiLib.cpp:305: void NCUI::run(uint64_t): Assertion `m_conn->isConnected()' failed.

By the way, I tried installing, removing and reinstalling all three versions of webkitgtk.

mvidaldp commented on 2020-03-27 12:04 (UTC)

I had the following errors while trying to run it:

/usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

/usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

I fixed it by installing: webkitgtk-bin icu64

However, I cannot connect to a VPN. When I try I get this:

20200327125631.442475 pulsesvc[p206629.t206684] IpcConn.error connect failed with error 111 (ncipc.cpp:227) pulseUi: pulseUiLib.cpp:305: void NCUI::run(uint64_t): Assertion `m_conn->isConnected()' failed. Aborted (core dumped)

chiwanpark commented on 2020-03-24 08:37 (UTC)

@danilopiazza Thanks for notification! I've pushed the updated package.

danilopiazza commented on 2020-03-23 22:07 (UTC)

As of March 2020, the latest version is 9.1r4.0-b143.

It hosted at either:


chiwanpark commented on 2019-11-17 15:18 (UTC)

@Baltazar72 @zarere You need to rebuild webkitgtk after ICU update.

Baltazar72 commented on 2019-11-16 21:39 (UTC) (edited on 2019-11-16 21:39 (UTC) by Baltazar72)

Is pulseUi supposed to be working if I install binaries from : ? I cannot get webkitgtk to build from aur.

When I use the prebuilt webkitgtk binaries i get :

$ pulseUi

/usr/local/pulse/pulseUi: symbol lookup error: /usr/lib/ undefined symbol: ucol_getLocaleByType_64

Hoping anyone can "set me straigh" :)

ThankYou Torstein

commented on 2019-11-15 09:10 (UTC)

I got this from today

➜ ~ pikaur -Ss pulse-secure Searching... [###] aur/pulse-secure 9.1r2.0_b69-1 [installed] (17, 0.58) Pulse Connect Secure (PCS) Client

➜ ~ pulseUi
/usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

➜ ~ sudo find /usr/ -iname "libicui18n.*"
/usr/lib/ /usr/lib/ /usr/lib/ /usr/lib32/ /usr/lib32/ /usr/lib32/

BTW the latest version is already

fraunos commented on 2019-10-17 07:45 (UTC)

@dpdani read older comments - this is where the newer version is hosted right now

dpdani commented on 2019-10-14 14:10 (UTC)

Is it normal that the download URL changed from <> to <>?

meop commented on 2019-10-09 04:45 (UTC)

@garylinux666 what is your output for ldd /usr/local/pulse/pulseUi | grep icu? Mine wants, which matches the file in /usr/lib/

garylinux666 commented on 2019-10-01 15:52 (UTC)

Does anyone know why if I run PulseUI do I receive this library error?. I already rebuilt webkitgtk and it still doesn't work.


/usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

find /usr/ -iname "libicui18n.*"

/usr/lib/ /usr/lib/ /usr/lib/ /usr/lib32/ /usr/lib32/ /usr/lib32/

chiwanpark commented on 2019-09-16 10:46 (UTC)

@danilopiazza Thanks for reporting! I'll update to 9.1r2 in this weekend. :)

danilopiazza commented on 2019-09-16 08:48 (UTC)

The latest version (July 2019) is 9.1r2.0-b69: >

chiwanpark commented on 2019-05-31 06:21 (UTC)

@klutchell The latest binary version is not 9.0 but 9.1 ( I'll update this package to 9.1r1.0-b21 in this weekend.

klutchell commented on 2019-05-30 11:36 (UTC) (edited on 2019-05-30 11:36 (UTC) by klutchell)

Here are some links to the latest binary releases:

I'd update it myself but I haven't contributed an arch package yet. I'll see if I can sort out the process this weekend if someone else hasn't repackaged it by then.

chiwanpark commented on 2019-03-26 13:35 (UTC)

@hkirsman You can use pulse-secure without webkitgtk via pulsesvc command. As described as in dependencies section, webkitgtk is required only for pulseUi frontend, not entire pulse-secure client.

hkirsman commented on 2019-03-26 06:58 (UTC)

To get pulseUi working I also had to install webkitgtk (something that has been mentioned below also). Wondering why it's not dependency of this package? May be there's even some better one because webkitgtk took quite a while to compile.

yan12125 commented on 2018-12-01 01:41 (UTC)

Dropped - I switched to openconnect to connect to Pulse Secure servers.

yan12125 commented on 2018-10-30 11:41 (UTC)

You need to rebuild webkitgtk if you got ICU related errors.

igor1982 commented on 2018-10-30 10:53 (UTC)

PulseUi doesn't work because it depends on the icu package in version 62, but icu has been updated to 63.

The error I got is

pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

Is there any way out except for downgrading icu?

hirunatan commented on 2018-10-11 12:54 (UTC) (edited on 2018-10-11 12:55 (UTC) by hirunatan)

Hello. I'm getting this error after successful login with pulseUi:

(pulseUi:9418): Gtk-ERROR **: 14:37:32.588: GTK+ 2.x symbols detected. Using GTK+ 2.x and GTK+ 3 in the same process is not supported
`trap' para punto de parada/seguimiento

I don't understand how could there be symbols of GTK 2 and GTK 3 in the same executable. Any clue of what to investigate or how to solve this?


je-vv commented on 2018-09-30 02:29 (UTC)

Currently using the "OATH Passcode" realm on the pulsesvc command line. Anyone has successfully attempted the "Class-A DigitalBadge" realm with pulsesvc, which requires a certificate? Upon executing "pulsescv --help" I see no way to specify a cert, and if using the the "Class-A DigitalBadge" realm doesn't prompt for a cert either. Thanks !

yan12125 commented on 2018-09-07 13:03 (UTC)

@kikislater: thanks for the patch! I've applied a simplified version and PulseClient should work now.

yan12125 commented on 2018-09-07 13:03 (UTC)

9.0r2.0_b1151 is out. Please leave a comment if you found a mirror. This version should be released as soon as possible as it contains security fixes [1].


kikislater commented on 2018-09-06 12:04 (UTC)

Ok thank you, pulsesvc works ! Someone patch it with older version : Don't need it at this time since pulsesvc works ...

yan12125 commented on 2018-09-06 10:11 (UTC)

@kikislater: is not supported on Arch Linux. Please consider using pulsesvc as an alternative. I'll try to check whether it is possible or not to patch so that it works on Arch Linux.

kikislater commented on 2018-09-06 07:21 (UTC) (edited on 2018-09-06 07:22 (UTC) by kikislater)

PulseClient does not work :

/usr/local/pulse/ -h host -u user

Checking for missing dependency packages for command line client ...

yan12125 commented on 2018-08-27 11:37 (UTC)

@johnchen902: Thanks!

@mgomez: The message tells nothing. If you have systemd, you may want to use coredumpctl to get full backtrace.

johnchen902 commented on 2018-08-26 14:57 (UTC)

You can download 9.0r1.0 from National Taiwan University:

See also:

mgomez commented on 2018-08-24 20:06 (UTC)

I get execution errors with kernel 4.18.x:

kernel: pulsesvc [568]: segfault at 7ffde4007060 ip 00007fea4de42667 sp 00007ffde4915158 error 4 in [7fea4dd05000 + 14b000]

Does anyone know the cause? It continues to work with kernel 4.17.

yan12125 commented on 2018-08-24 05:38 (UTC)

@patrick.luehne, @DrJPeppe: Both 5.3r4.2 and 9.0r1.0 works fine with ICU 62. Make sure you've rebuilt webkitgtk after upgrading to ICU 62.

patrick.luehne commented on 2018-08-23 15:08 (UTC)

@DrJPepper: The latest version of Pulse Secure (9.0R1) requires an outdated version of ICU (version 61 is required, but Arch comes with ICU 62 now). There is an AUR package for icu61, which should do the trick. If you’re using an older version of Pulse Secure, you may need another version of ICU.

However, I’d appreciate if this PKGBUILD could be updated to 9.0R1 with the additional dependency on icu61 to make it work again …

DrJPepper commented on 2018-08-23 14:46 (UTC)

Has anyone gotten this to work recently? Seems to be linked to a lot of outdated libs (even the version from 5-26), and just simlinking the newer version of said libs results in further errors.

yan12125 commented on 2018-05-26 15:00 (UTC) (edited on 2018-06-05 05:57 (UTC) by yan12125)

I created a branch 'latest-pulse-secure' [1] that uses unofficial RPMs. Use at your own risk.


patrick.luehne commented on 2018-05-25 17:45 (UTC)

@yan12125: Pulse Secure 9.0R1 has been released recently. The only RMP containing 9.0R1 I’ve found so far is Not sure whether there is a more official source though.

yan12125 commented on 2018-04-03 14:10 (UTC)

@thecrow: Thanks for the info. I switched to the mirror on my school's server temporarily to get the latest version. If you have a link from or other ideas, please tell me.

thecrow commented on 2018-04-03 12:42 (UTC)

The pulse secure PULSE5.3R4.1 and lower is vulnerability:

The Pulse Linux GUI component does not perform strict SSL certificate validation which allows the attacker to manipulate the Pulse connection set. (

This issue is resolved in the following Pulse Secure Desktop Linux client releases PULSE5.3R4.2 Software (Build 639)

yan12125 commented on 2018-03-08 11:03 (UTC)

Info for the latest version:

Latest unofficial download links: I just tried ps-pulse-linux-5.3r4.2-b639-centos-rhel-64-bit-installer.rpm and it's still linked to legacy webkitgtk rather than modern webkit2gtk.

pd5rm commented on 2018-01-10 00:21 (UTC)

@yan12125 re: link issues. It just seemed like there were less runtime link dependencies on the older webkitgtk2 vs the newer one, so I choose that one to get something running more easily.

yan12125 commented on 2017-12-23 03:44 (UTC)

@pd5rm: Thanks for the patch, but it's not necessary now. I've adopted webkitgtk and applied the enchant fix. Furthermore, the archlinuxcn team has published prebuilt binaries for webkitgtk. Check my comments at the webkitgtk package.

seems to have less link issues

Mind sharing what's the actual linking issue? It might be a webkitgtk issue and can be solved there.

pd5rm commented on 2017-12-23 00:17 (UTC) (edited on 2017-12-23 00:23 (UTC) by pd5rm)

Sorry, didn't have notifications enabled so didn't see earlier responses. I cleaned up my patch a little (makes the lib stuff more generic), and merge from latest master.

It's basically working around the issue of building webkitgtk from source which is very time consuming by pulling down the related binary bits (icu, enchant, webkitgtk) from archives. It's not a great way to package, but until Pulse starts pushing new builds there's not much else we can do here but workaround it.

@yan12125 I don't know if webkitgtk2 is any better, but seems to have less link issues when I tried. I think webkitgtk is newer in that it has GTK3 support. The versioning is very confusing.

Happy holidays and new year!

I put it in a GIST, since it got garbled a bit.

yan12125 commented on 2017-12-17 17:18 (UTC)

@ImNtReal, @mlotysz: icu and enchant issues belong to the webkitgtk package instead of this one. Please leave comments at if you want them fixed.

@pd5rm: Is webkitgtk2 better than webkitgtk? Both are AUR packages and need lots of time for building.

@csmiet: Thanks for the suggestion. I'm currently rebuilding (patched) webkitgtk for testing. Please checkout for progress.

ImNtReal commented on 2017-12-15 16:22 (UTC)

I needed to install enchant1.6 and icu59 to get pulseUi to run.

mlotysz commented on 2017-12-14 19:38 (UTC)

Hi yan12125,

I packed pd5rm patch (see pd5rm commented on 2017-12-02 00:54) and added missing to it. Pulse secure is running now, however I don't have possibility to test it thoroughly. Patch:

Have fun!

MK1166 commented on 2017-12-12 17:20 (UTC)

Hi, I´m trying to run the pulseUi on a fresh ArchLinux installation. It fails with /usr/local/pulse/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory I don´t know where i can find this lib. Can anybody help me, please?. Thanks a lot.

pd5rm commented on 2017-12-01 23:54 (UTC)

I had some issues with this, so I wrote up a patch that makes it work for me. 1) Used Debian version instead of CentOS. Webkitgtk2 uses GTK 1 for Debian vs using GTK 3 (not available as a dep) for CentOS. 2) Made webkitgtk a real dependency since it's needed now because of previous step. 3) Added icu59 libs (pulled from archive, not ideal but it works) 4) Fixup related LD_LIBRARY_PATHs because of icu59 dep. 5) Fixup desktop file. The upstream pulse packages (deb/rpm) are just wrappers around shell scripts that do the installing. They also will rm -rf /usr/local if used. ;-( --- PKGBUILD | 27 +++++++++++++++++++++------ | 2 +- 2 files changed, 22 insertions(+), 7 deletions(-) diff --git a/PKGBUILD b/PKGBUILD index fdd2160..8826e96 100644 --- a/PKGBUILD +++ b/PKGBUILD @@ -2,26 +2,32 @@ pkgname=pulse-secure pkgver=5.3r3.0 -pkgrel=3 +pkgrel=4 pkgdesc='Pulse Connect Secure (PCS) Client' arch=(x86_64) license=(custom) url='' depends=(gcc-libs libgnome-keyring) source=("$pkgver-b1021-centos-rhel-64-bit-installer.rpm" + "" EULA.txt) md5sums=('4cbe64953952d9ffdeaa4ffe2fc92a20' - 'd81155461e2666c2b9d669c1b76f85fe' + '049ca9bf777280536b3b75861e1512eb' + '44bb6dd99f201b84ed5e30aae17bc8f9' '261848a28201e5386ec4bf587473a48b') -optdepends=('webkitgtk: for pulseUi frontend' - 'psmisc: for pulsesvc -K') +depends=('webkitgtk2') +optdepends=('psmisc: for pulsesvc -K') conflicts=(pulse-connect-secure) prepare() { mkdir -p pulse && pushd pulse tar -zxvf ../usr/local/pulse/pulse.tgz popd + + # Extact libicu59 dependency no longer available in Arch current + mkdir -p libicu59 + cp usr/lib/libicu* libicu59 } package() { @@ -33,8 +39,15 @@ package() { # Skip - seems it's not useful here install -Dm755 pulse/{pulsediag,pulseutil} "${pkgdir}"/usr/local/pulse/ install -Dm4755 pulse/pulsesvc "${pkgdir}"/usr/local/pulse/ - install -Dm755 pulse/pulseUi_centos_7_x86_64 "${pkgdir}"/usr/local/pulse/pulseUi - install -Dm755 pulse/libpulseui.so_centos_7_x86_64 "${pkgdir}"/usr/local/pulse/ + # The Ubuntu version has depedency on WebGTK 2 which is easier to deal with than CentOS build. + install -Dm755 pulse/pulseUi_Ubuntu_16_x86_64 "${pkgdir}"/usr/local/pulse/pulseUi + install -Dm755 pulse/libpulseui.so_Ubuntu_16_x86_64 "${pkgdir}"/usr/local/pulse/ + + # Fix desktop file libicu + sed -i 's|$LD_LIBRARY_PATH|/usr/local/pulse/libicu59:$LD_LIBRARY_PATH|' pulse/pulseUi.desktop + # Fix desktop file version (desktop-file-validate complains about it) + sed -i 's|^version|Version|' pulse/pulseUi.desktop + install -Dm644 pulse/pulseUi.desktop "${pkgdir}"/usr/share/applications/ # Wrappers & symlinks @@ -43,5 +56,7 @@ package() { cp -dr --no-preserve=ownership pulse/html "${pkgdir}"/usr/local/pulse/html + cp -dr --no-preserve=ownership libicu59 "${pkgdir}"/usr/local/pulse + install -Dm644 EULA.txt "${pkgdir}"/usr/share/licenses/$pkgname/ } diff --git a/ b/ index ed7eced..d9515ed 100644 --- a/ +++ b/ @@ -1,4 +1,4 @@ #!/bin/sh -export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/pulse +export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/pulse/libicu59:/usr/local/pulse exec /usr/local/pulse/pulseUi -- 2.15.1

jsimonetti commented on 2017-11-21 13:02 (UTC)

@patrick.luehne This is not really the fault of this package. You need to also rebuilt webkitgtk, since that is actually the package with the icu dependency.

patrick.luehne commented on 2017-11-21 11:31 (UTC) (edited on 2017-11-21 11:32 (UTC) by patrick.luehne)

@yan12125: This package’s pulseUi command doesn’t work currently, because icu got updated earlier this month to version 60, but the pulseUi command requires the so files from version 59. This results in loading errors when attempting to start pulseUi. Fortunately, there is an icu59 package now in order to install older so files. For this reason, I’d suggest exchanging the icu dependency with icu59 until Pulse Secure sees a new release :).

csmiet commented on 2017-11-17 20:37 (UTC)

Hi, Thanks for packaging! Could you include the installation of if you ever update the PKGBUILD? My institute uses it for cli-based logon to the vpn.

jjfawkes commented on 2017-11-15 05:30 (UTC)

Hi, I installed lib32-webkitgtk, but when I run pulseUi from terminal, I get the same error: "error while loading shared libraries: cannot open shared object file: No such file or directory. I read through all the comments and searched online, but could not find what I am missing. Could you please help me?

yan12125 commented on 2017-10-25 14:30 (UTC)

I gave up and moved files back to /usr/local/pulse. Things are beyond my control. @jsimonetti: thanks for testing results!

jsimonetti commented on 2017-10-24 18:07 (UTC)

It appears that actually it is the running of pulsesvc which is the problem. I removed the symplink and ran pulseUi from terminal: % LD_LIBRARY_PATH=/opt/pulsesecure:$LD_LIBRARY_PATH /opt/pulsesecure/pulseUi (pulseUi:1623): libsoup-CRITICAL **: soup_cookie_jar_get_cookies: assertion 'SOUP_IS_COOKIE_JAR (jar)' failed Cert Subject Name: <snip> Cert Issuer Name: <snip> Cert Expiry Date: <snip> sh: /usr/local/pulse/pulsesvc: No such file or directory

rudepeople commented on 2017-10-24 12:58 (UTC) (edited on 2017-10-24 13:04 (UTC) by rudepeople)

@yan12125: how about this error; (pulseUi:1614): libsoup-CRITICAL **: soup_cookie_jar_get_cookies: assertion 'SOUP_IS_COOKIE_JAR (jar)' failed [EDIT]: never mind... this seems to be a proxy issue of some kind. I'm going to following up with Pulse team.

yan12125 commented on 2017-10-24 10:20 (UTC)

@jsimonetti: Could you run `sudo strace -fp <pid of pulsesvc> |& grep /usr/local/pulse` to see which path is it accessing? I may reconsider putting things back to /usr/local/pulse. See also for previous discussions. @rudepeople: that message is less than informative. Only Pulse Secure staff can fix it - nobody else has pulseUi.cpp.

jsimonetti commented on 2017-10-24 10:00 (UTC)

For some reason, this package only works if I also add a symlink from /usr/local/pulse -> /opt/pulsesecure/ Our company uses a hostchecker (which doesn't do anything for linux platform, but still runs). Without this symlink, the log is spammed with errors such as: pulseui.error Failed to read return cookie from host checker process (pulseUi.cpp:948) pulseui.error initiatePreAuthHostCheck() failed, isPostAuth: 1 (pulseUi.cpp:1055) So somewhere in the pulseUi code there appears to be a hardcoded path to /usr/local/pulse ;(

rudepeople commented on 2017-10-24 05:18 (UTC) (edited on 2017-10-24 05:21 (UTC) by rudepeople)

@yan12125: Yep, I'm already using networkmanager, and before you responded, I went ahead and installed gnome... same issue. On your suggestion, I ran: $tail -f ~/.pulse_secure/pulse/pulsesvc.log every time I click "submit" (within pulseUi) I get something like this: 20171023224951.187212 pulsesvc[p2864.t2864] pulseui.error (pulseUi.cpp:265) I'm seeing it every time I hit "submit". I tried googleing it, but I'm not seeing that specific error anywhere else (the search was only 2 pages deep so... gotta check 'em all!), and I cant seem to get to to search for the error specifically. I get a DNS error when I try. Any help would be greatly appreciated! Before anyone suggests network issues, my ISP is a "last mile" provider. their network is secure as FSCK, but it's also completely transparent, lacking all the traffic shaping BS of large providers. Also, this all works fine in... *sigh*

yan12125 commented on 2017-10-24 04:45 (UTC)

@rudepeople: This is DE-independent. I use this fine with LXQt. I indeed got some issue with connman. Its routing table strategy conflicts with pulse-secure, so I switched to NetworkManager. BTW, I found that after checking ~/.pulse_secure/pulse/pulsesvc.log.

rudepeople commented on 2017-10-24 03:19 (UTC)

do I have to have gnome installed for this to work? when I open pulseUi and add my company connection, I get the user-name field, but clicking submit yields no response... I'm attempting to run this in KDE.

yan12125 commented on 2017-10-23 17:08 (UTC)

Yes, you need the 64-bit version for the new version. BTW, I hope this can implemented: Help wanted :)

codedmart commented on 2017-10-23 16:54 (UTC)

Nevermind I see what happened.

codedmart commented on 2017-10-23 16:48 (UTC)

@yan12125 I am seeing this error now after upgrading: `/opt/pulsesecure/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory`

yan12125 commented on 2017-10-22 15:39 (UTC)

I bet you're right. It's stated in their release notes. Updated and thanks!

commented on 2017-10-22 15:14 (UTC)

@yan12125: I only received links for the 5.3r3.0 64-bit installers unfortunately. Maybe they dropped support for 32-bit starting with the 5.3r3.0 release?

yan12125 commented on 2017-10-22 14:23 (UTC)

@Headless: Awesome! Is there a link to 32-bit installers for 5.3r3.0? (Or a 64-bit installer for 5.3r1.0) I feel it strange to use different versions for 32 and 64-bit installers, and I don't want to leave 32-bit users behind. Arch still supports existing 32-bit installations for now.

commented on 2017-10-21 20:42 (UTC)

@yan12125: I managed to get the URL for the 64-bit client from Pulse Secure webpage. I saw the previous one you have for this AUR and signed up for a trial which provided me with these download links: One for deb and one for rpm.

yan12125 commented on 2017-10-21 18:46 (UTC) (edited on 2017-10-21 18:49 (UTC) by yan12125)

@Headless: thanks! With that file I can baked up a PKGBUILD for x86_64. [1] I don't plan to use the x86_64 deb for the PKGBUILD script on AUR as of now. I shouldn't assume trust to URLs other than in PKGBUILD. (Yes, my previous pulse-connect-secure package was a BIG mistake) If someone really wants to install the x86_64 version, he/she needs to check whether to trust the 3rd party URL or not, and then download the deb file and place them in the same directory for building. PS. I haven't test that PKGBUILD yet. [1]

commented on 2017-10-21 17:44 (UTC)

@yan12125: They require that you log in to their portal in order to retrieve the deb file. Since the company I work at that are customers at Pulse Secure we can retrieve the deb file. Anyway I uploaded it to my personal VPS, you can get it here:

yan12125 commented on 2017-10-21 12:38 (UTC)

@Headless: Sounds good. Is there a public URL for that?

commented on 2017-10-21 09:25 (UTC)

They have released a 64-bit client. I can provide you with the deb file if you want.

yan12125 commented on 2017-10-03 06:27 (UTC)

@nabz0r: You need lib32-webkitgtk then. I should have make things more clear...

nabz0r commented on 2017-10-02 09:27 (UTC)

I get the following: /opt/pulsesecure/pulseUi: error while loading shared libraries: cannot open shared object file: No such file or directory

yan12125 commented on 2017-10-02 08:46 (UTC)

@nabz0r: What's the result if you run "pulseUi" from the terminal?

nabz0r commented on 2017-10-02 08:41 (UTC)

Hi, Thanks for this package. I am also having problem starting it. After the installation it doesn't start/run. When clicking pulse-secure nothing happens and I have all the dependencies installed. Any idea? Thanks in advancaed

msmol commented on 2017-09-07 18:42 (UTC)

yan12125, also, big thank you for this package mattia46: you probably are missing the optional dependency lib32-webkitgtk which will make the GUI for this package work

yan12125 commented on 2017-09-06 17:05 (UTC)

Hi mattia46, could you describe more? For example what are you trying to do and what's the result?

mattia46 commented on 2017-09-05 21:11 (UTC)

Hi yab12125, thank you for this package. Unfortunately once I installed it (through yaourt), the package doesn't run. Am i missing something? Thank you Mattia