diff options
| author | Vladislav Grigoryev <vg.aetera@gmail.com> | 2023-10-14 12:25:34 +0300 |
|---|---|---|
| committer | Vladislav Grigoryev <vg.aetera@gmail.com> | 2023-10-14 15:30:15 +0300 |
| commit | 4af0378ef91929d060c540f5a146476a6c32beec (patch) | |
| tree | 9ed4eadecb436a06cb401ef29eb64363f4f4711a /net/openconnect/files | |
| parent | b19f8a822b948c75bb40dfec03ab0a9344e25963 (diff) | |
openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.
Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
Diffstat (limited to 'net/openconnect/files')
| -rwxr-xr-x | net/openconnect/files/openconnect.sh | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh index 25fb7d542..d318b97e0 100755 --- a/net/openconnect/files/openconnect.sh +++ b/net/openconnect/files/openconnect.sh @@ -20,6 +20,7 @@ proto_openconnect_init_config() { proto_config_add_int "juniper" proto_config_add_int "reconnect_timeout" proto_config_add_string "vpn_protocol" + proto_config_add_boolean "pfs" proto_config_add_boolean "no_dtls" proto_config_add_string "interface" proto_config_add_string "username" @@ -58,6 +59,7 @@ proto_openconnect_setup() { os \ password \ password2 \ + pfs \ port \ proxy \ reconnect_timeout \ @@ -84,6 +86,7 @@ proto_openconnect_setup() { [ -n "$port" ] && port=":$port" append_args "$server$port" -i "$ifname" --non-inter --syslog --script /lib/netifd/vpnc-script + [ "$pfs" = 1 ] && append_args --pfs [ "$no_dtls" = 1 ] && append_args --no-dtls [ -n "$mtu" ] && append_args --mtu "$mtu" |