Adding a trusted certificate for FortiSSLVPN in NetworkManager

I needed to connect to a Fortinet SSLVPN, but the certificate on it had expired. While the official Mac client prompts and lets you connect anyways, Linux with NetworkManager (and the FortiSSLVPN plugin) would refuse without providing any messages. Unfortunately, I couldn’t ask the administrator to renew the certificate. What you can do is add the certificate as a trusted certificate for that VPN. Unfortunately, the interface to do this is unclear, so I’ll try to explain it here.

Continue reading

Fixing Overwatch voice chat after upgrading to Fedora 33

After upgrading my system to Fedora 33, I realized voice chat in Overwatch didn’t work. The symptoms included:

  • The microphone worked in other applications, and there was no permissions issues involved
  • When joining a voice chat (like a group), the message saying that you’re in a voice chat would never appear, and you would never hear anyone else
  • The microphone icon in the game was forced to mute

Switching the WINE audio system from Pulse to ALSA didn’t work. What did work was changing the system cryptography policies:

$ sudo update-crypto-policies --set LEGACY

No reboot is required. This is an awfully big hammer though – I’d like to know what exact ciphers or protocols that Overwatch needs that are disabled in the stock crypto policies.