diff options
| author | Vladimir Berezhnoy <non7top@gmail.com> | 2017-11-07 13:11:34 +0300 |
|---|---|---|
| committer | Vladimir Berezhnoy <non7top@gmail.com> | 2017-11-20 14:03:28 +0300 |
| commit | d710c629e838ba42b2ef2359279e2fd357c61bbf (patch) | |
| tree | ecc90a91d3aa57701232822501ceb252f989723c /net/openconnect | |
| parent | 91dc4e824d24039a98758c3d66ac69ae53e49371 (diff) | |
openconnect: add options to support juniper
Signed-off-by: Vladimir Berezhnoy <non7top@gmail.com>
Diffstat (limited to 'net/openconnect')
| -rw-r--r-- | net/openconnect/Makefile | 9 | ||||
| -rw-r--r-- | net/openconnect/README | 3 | ||||
| -rwxr-xr-x | net/openconnect/files/openconnect.sh | 8 |
3 files changed, 15 insertions, 5 deletions
diff --git a/net/openconnect/Makefile b/net/openconnect/Makefile index ec2554c83..b17c5e132 100644 --- a/net/openconnect/Makefile +++ b/net/openconnect/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=openconnect PKG_VERSION:=7.08 -PKG_RELEASE:=4 +PKG_RELEASE:=5 PKG_USE_MIPS16:=0 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz @@ -32,19 +32,20 @@ define Package/openconnect SECTION:=net CATEGORY:=Network DEPENDS:=+libxml2 +kmod-tun +resolveip +vpnc-scripts +OPENCONNECT_OPENSSL:libopenssl +OPENCONNECT_OPENSSL:p11-kit +OPENCONNECT_OPENSSL:libp11 +OPENCONNECT_GNUTLS:libgnutls +OPENCONNECT_STOKEN:libstoken - TITLE:=OpenConnect VPN client (Cisco AnyConnect compatible) + TITLE:=OpenConnect VPN client (Cisco AnyConnect and Juniper/Pulse compatible) MAINTAINER:=Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com> URL:=http://www.infradead.org/openconnect/ SUBMENU:=VPN endef define Package/openconnect/description - A VPN client compatible with Cisco's AnyConnect SSL VPN and ocserv. + A VPN client compatible with Cisco's AnyConnect SSL VPN, ocserv and Juniper (Pulse secure). OpenConnect is a client that follows the Cisco's AnyConnect SSL VPN protocol, which is supported by IOS 12.4(9)T or later on Cisco SR500, 870, 880, 1800, 2800, 3800, 7200 Series and Cisco 7301 Routers, as well as the OpenConnect - VPN server. + VPN server. It has later been ported to support the Juniper SSL VPN which + is now known as Pulse Connect Secure. endef CONFIGURE_ARGS += \ diff --git a/net/openconnect/README b/net/openconnect/README index 772b0e3cc..1a7b798d5 100644 --- a/net/openconnect/README +++ b/net/openconnect/README @@ -26,6 +26,9 @@ config interface 'MYVPN' #option token_mode 'hotp' #option token_secret '00' + # Juniper vpn support + #option juniper '1' + The additional files are also used: /etc/openconnect/user-cert-vpn-MYVPN.pem: The user certificate /etc/openconnect/user-key-vpn-MYVPN.pem: The user private key diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh index 0e3d90ab4..4f8ee0629 100755 --- a/net/openconnect/files/openconnect.sh +++ b/net/openconnect/files/openconnect.sh @@ -7,6 +7,7 @@ proto_openconnect_init_config() { proto_config_add_string "server" proto_config_add_int "port" proto_config_add_int "mtu" + proto_config_add_int "juniper" proto_config_add_string "username" proto_config_add_string "serverhash" proto_config_add_string "authgroup" @@ -23,7 +24,7 @@ proto_openconnect_init_config() { proto_openconnect_setup() { local config="$1" - json_get_vars server port username serverhash authgroup password password2 token_mode token_secret os csd_wrapper mtu + json_get_vars server port username serverhash authgroup password password2 token_mode token_secret os csd_wrapper mtu juniper grep -q tun /proc/modules || insmod tun ifname="vpn-$config" @@ -52,6 +53,11 @@ proto_openconnect_setup() { append cmdline "--cafile /etc/openconnect/ca-vpn-$config.pem" append cmdline "--no-system-trust" } + + if [ "${juniper:-0}" -gt 0 ]; then + append cmdline "--juniper" + fi + [ -n "$serverhash" ] && { append cmdline " --servercert=$serverhash" append cmdline "--no-system-trust" |