aboutsummaryrefslogtreecommitdiff
path: root/net/openconnect
diff options
context:
space:
mode:
authorVladislav Grigoryev <vg.aetera@gmail.com>2023-10-14 12:25:34 +0300
committerVladislav Grigoryev <vg.aetera@gmail.com>2023-10-14 15:30:15 +0300
commit4af0378ef91929d060c540f5a146476a6c32beec (patch)
tree9ed4eadecb436a06cb401ef29eb64363f4f4711a /net/openconnect
parentb19f8a822b948c75bb40dfec03ab0a9344e25963 (diff)
openconnect: add support for option --pfs
Add support for the OpenConnect option `--pfs`. Designed to require perfect forward secrecy. Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
Diffstat (limited to 'net/openconnect')
-rw-r--r--net/openconnect/Makefile2
-rwxr-xr-xnet/openconnect/files/openconnect.sh3
2 files changed, 4 insertions, 1 deletions
diff --git a/net/openconnect/Makefile b/net/openconnect/Makefile
index e4c776726..1ec7d70d2 100644
--- a/net/openconnect/Makefile
+++ b/net/openconnect/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=openconnect
PKG_VERSION:=9.01
-PKG_RELEASE:=1
+PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=ftp://ftp.infradead.org/pub/openconnect/
diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh
index 25fb7d542..d318b97e0 100755
--- a/net/openconnect/files/openconnect.sh
+++ b/net/openconnect/files/openconnect.sh
@@ -20,6 +20,7 @@ proto_openconnect_init_config() {
proto_config_add_int "juniper"
proto_config_add_int "reconnect_timeout"
proto_config_add_string "vpn_protocol"
+ proto_config_add_boolean "pfs"
proto_config_add_boolean "no_dtls"
proto_config_add_string "interface"
proto_config_add_string "username"
@@ -58,6 +59,7 @@ proto_openconnect_setup() {
os \
password \
password2 \
+ pfs \
port \
proxy \
reconnect_timeout \
@@ -84,6 +86,7 @@ proto_openconnect_setup() {
[ -n "$port" ] && port=":$port"
append_args "$server$port" -i "$ifname" --non-inter --syslog --script /lib/netifd/vpnc-script
+ [ "$pfs" = 1 ] && append_args --pfs
[ "$no_dtls" = 1 ] && append_args --no-dtls
[ -n "$mtu" ] && append_args --mtu "$mtu"