Arch Linux User Repository

If you want to use old pulse-secure client 9.1r9, please download the following package.

https://drive.google.com/file/d/1_8tRA-T9vV08n_TpHqdcG5IvalxBuZ7_/view?usp=sharing

The rewritten pulse-secure client requires a service called 'pulsesecure'. Please enable and start the service before running the client.

@adrea.denisse The symbolic link you created is not correct, you must create:
sudo ln -s /etc/ca-certificates/extracted/ca-bundle.trust.crt /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt

Hi, I'm having a lot of troubles with CA Certificates.

I ran the following steps as recommended by other users:

1. sudo mkdir -p /var/lib/pulsesecure/pulse
2. trust extract-compat
3. sudo ln -s /etc/ca-certificates/extracted/ca-bundle.trust.crt /etc/ca-certificates/extracted/openssl/ca-bundle.trust.crt
4. systemctl start pulsesecure.service

But I'm still getting the "You are about to aunthenticate to an untrusted server" error. Do any of you have an idea of what I could be doing wrong?

After system restart it has started working :)

@chiwanpark Yes, I have started it.

@tomek2102 did you start the service named 'pulsesecure'? 9.1R11 requires the service. you need to start the service before running the client.

Hi, I'm trying to get it working too but I have following problem:

DBUS api call failed with code: 2 - message:GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name net.psecure.pulse was not provided by any .service files

The UI sometimes starts but I cannot create connection and connect. I have created dir and symlink but without any change. What can be wrong? The client version between last November and December was working OK.

After reading thecrow's comments I created the missing /var/lib/pulsesecure/pulse directory:

$ sudo mkdir -p /var/lib/pulsesecure/pulse

and created a symlink:

$ sudo ln -s /etc/ca-certificates/extracted/ca-bundle.trust.crt /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt

and now I am able to connect, so some might attempt these steps before reverting.

I also did not need to restart the pulsesecure service, pulselauncher worked after the symlink and directory were created.

I extracted the RPM spec file from pulsesecure-9.1-R11.x86_64.rpm using rpmrebuild and found that:

$ mkdir -p /var/lib/pulsesecure/pulse

was in the %post section of the extracted SPEC but is not in the PKGFILE. The symlink needs to be created because this is where redhat/centos/etc distros store CA bundles, and thus where the pulse package expects it to be, as evidenced by running strings on the pulselauncher binary and grepping for .crt:

$  strings /opt/pulsesecure/bin/pulselauncher | grep "[.]crt"
/etc/ssl/certs/ca-certificates.crt
/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt

@thecrow:

THAT was really really helpful, thanks a lot. Now, my pulse client works like a charm ...

@abyss02

To resolve the certificate warning, pulsesecure will look for the certificate authorities in the path /etc/pki/ca-trust/extracted/openssl, add the symbolic link:

/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt -> /etc/ca-certificates/extracted/ca-bundle.trust.crt

The connections are saved in /var/lib/pulsesecure/pulse, you have to create the directory so that pulsesecure can save them and they are not lost when restarting the service.

Ok, installed the new 9.1R11 and ran systemctl enable pulsesecure && systemctl start pulsesecure - afterwards restarted arch:

So,

1. pulseUI works
2. adding a connection works
3. connecting works

but ...

1. i always get a cert warning, although i imported the needed ca with trust anchor an so on ... (but this is probably my problem)

BUT ...

1. if the pulsesecure.service is restarted, the gui looses all the connections ... that is weird.

Any ideas?

Regards, A.