Gateway certificate issue on Android Globalprotect

[jsalmans]

I've currently got a support case open for this, but I'm trying to see if other users are having the same issue.

From what I've seen:

6.1.11 - No issue

6.1.12 - No issue

6.1.13 - Issue Occurs

6.1.14 - Issue Occurs (current version on Play Store)

The issue seems to be that the client doesn't trust the certificate for the gateway.  I'm not sure if it's the same bug or not, but it sounds similar to:

GPC-24228
Fixed an issue where Android devices running the GlobalProtect agent were unable to connect to gateways, displaying a "Could not verify the server certificate of the gateway" error. This occurred because a common code change caused the GlobalProtect agent to use the OpenSSL framework for gateway server certificate handshakes, which was unable to access certificates stored in the Android key-store.

GPC-24228 was marked as fixed in 6.1.11, though.  The actual error I see on an Android client:

"GlobalProtect failed to connect to the login server.  Contact your IT help desk to resolve the issue

Error Details:
The certificate for this server was signed by an unknown certifying authority.  You might be connecting to a server that is pretending to be [insert gateway cert CN here] which could put your confidential information at risk."

The fact that it is getting my gateway list implies it is authenticating past the portal, SSO, and MFA.  I can downgrade from 6.1.14 to 6.1.12 and connect with no errors with no config change on the firewall or client (other than the re-install).

Anyone else seeing this?

Thanks!