ocserv 用自签名证书出现 Error establishing the CSTP channel 是什么问题

用的客户端是 OpenConnect 7.08

2020-04-05 00:17:19 | ed8 | POST https://srv9825.*******./ 2020-04-05 00:17:19 | ed8 | Attempting to connect to server [2a02:::::1541]:443 2020-04-05 00:17:19 | ed8 | Connected to [2a02:::::1541]:443 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: OU=Copyright (c) 1997 Microsoft Corp.,OU=Microsoft Corporation,CN=Microsoft Root Authority. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: CN=TUM,O=TUM. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=US,O=MSFT,CN=Microsoft Authenticode(tm) Root Authority. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=SG,O=GMO GlobalSign Pte Ltd,CN=GlobalSign TSA for Advanced - G2. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: CN=ABC,O=ABC. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=US,O=Symantec Corporation,CN=Symantec Time Stamping Services Signer - G4. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=SG,O=GMO GlobalSign Pte Ltd,CN=GlobalSign TSA for MS Authenticode - G2. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=US,O=Symantec Corporation,OU=Symantec Trust Network,CN=Symantec SHA256 TimeStamping Signer - G2. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO SHA-256 Time Stamping Signer. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: CN=USB\VID_04E8&PID_685D (libwdi autogenerated). 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=GB,ST=Greater Manchester,L=Salford,O=COMODO CA Limited,CN=COMODO SHA-1 Time Stamping Signer. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: CN=Root Agency. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: CN=www.95599.cn,OU=Agricultural Bank of China,O=ABC. 2020-04-05 00:17:19 | ed8 | There was a non-CA certificate in the trusted list: C=CN,ST=BeiJing,O=Microdone,OU=tech,CN=windows10.microdone.cn,[email protected]. 2020-04-05 00:17:19 | ed8 | SSL negotiation with srv9825.*******. 2020-04-05 00:17:19 | ed8 | Server certificate verify failed: signer not a CA certificate 2020-04-05 00:17:20 | ed8 | Connected to HTTPS on srv9825.*******. 2020-04-05 00:17:21 | ed8 | Got HTTP response: HTTP/1.1 200 OK 2020-04-05 00:17:21 | ed8 | Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure 2020-04-05 00:17:21 | ed8 | Content-Type: text/xml 2020-04-05 00:17:21 | ed8 | Content-Length: 306 2020-04-05 00:17:21 | ed8 | X-Transcend-Version: 1 2020-04-05 00:17:21 | ed8 | HTTP body length: (306) 2020-04-05 00:17:21 | ed8 | XML POST enabled 2020-04-05 00:17:21 | ed8 | Please enter your username. 2020-04-05 00:17:21 | ed8 | Text form: username 2020-04-05 00:17:21 | ed8 | POST https://srv9825.*******./auth 2020-04-05 00:17:21 | ed8 | Got HTTP response: HTTP/1.1 200 OK 2020-04-05 00:17:21 | ed8 | Set-Cookie: webvpncontext=iSmJGMDQS+hgfZK3WLEm3NNvgXirhqo1FKEL623uvqo=; Max-Age=300; Secure 2020-04-05 00:17:21 | ed8 | Content-Type: text/xml 2020-04-05 00:17:21 | ed8 | Content-Length: 310 2020-04-05 00:17:21 | ed8 | X-Transcend-Version: 1 2020-04-05 00:17:21 | ed8 | HTTP body length: (310) 2020-04-05 00:17:21 | ed8 | Please enter your password. 2020-04-05 00:17:21 | ed8 | Password form: password 2020-04-05 00:17:26 | ed8 | POST https://srv9825.*******./auth 2020-04-05 00:17:26 | ed8 | Got HTTP response: HTTP/1.1 200 OK 2020-04-05 00:17:26 | ed8 | Connection: Keep-Alive 2020-04-05 00:17:26 | ed8 | Content-Type: text/xml 2020-04-05 00:17:26 | ed8 | Content-Length: 221 2020-04-05 00:17:26 | ed8 | X-Transcend-Version: 1 2020-04-05 00:17:26 | ed8 | Set-Cookie: webvpncontext=iSmJGMDQS+hgfZK3WLEm3NNvgXirhqo1FKEL623uvqo=; Secure 2020-04-05 00:17:26 | ed8 | Set-Cookie: webvpn=<elided>; Secure 2020-04-05 00:17:26 | ed8 | Set-Cookie: webvpnc=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure 2020-04-05 00:17:26 | ed8 | Set-Cookie: webvpnc=bu:/&p:t&iu:1/&sh:05E3966ABD592359FA5423CF2BCA40E6727EFC36; path=/; Secure 2020-04-05 00:17:26 | ed8 | HTTP body length: (221) 2020-04-05 00:17:26 | ed8 | Got inappropriate HTTP CONNECT response: HTTP/1.1 401 Cookie is not acceptable 2020-04-05 00:17:26 | ed8 | Error establishing the CSTP channel 2020-04-05 00:17:26 | 1304 | Disconnected