aboutsummaryrefslogtreecommitdiff
path: root/net/openconnect/Makefile
Commit message (Collapse)AuthorAge
* openconnect: make host dependency more resilientNikos Mavrogiannopoulos2024-02-16
| | | | | | | | | Retry when resolveip fails as it seems to be causing issues on startup depending on various unpredictable parameters. Resolves: #23185 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: update to 9.12Rosen Penev2024-01-02
| | | | | | Remove upstream backport and fix libxml 1.12 compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* openconnect: add support for option --pfsVladislav Grigoryev2023-10-14
| | | | | | | Add support for the OpenConnect option `--pfs`. Designed to require perfect forward secrecy. Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
* treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16Andre Heider2023-04-08
| | | | | | | See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with PKG_BUILD_FLAGS:=no-mips16" on the main repository. Signed-off-by: Andre Heider <a.heider@gmail.com>
* Revert "openconnect: drop the dependency on resolveip"Rui Salvaterra2022-06-01
| | | | | | | | | Using resolveip is more robust and predictable than depending on nslookup and awk. This reverts commit 131ec7b3bd6895aa3f86f57169dd23c15f174fe2. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: drop the dependency on resolveipRui Salvaterra2022-05-23
| | | | | | We have nslookup and awk, let's use them. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: bump to version 9.01Rui Salvaterra2022-05-12
| | | | | | | | | Now with basic support for the Array Networks SSL VPN protocol. Also fix the OpenSSL build. OpenConnect requires support for deprecated APIs, for the time being, so select them if compiling against OpenSSL. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: updated to 8.20Nikos Mavrogiannopoulos2022-02-25
| | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: fix dependencies to iconv/intl (fixes #14734)Michael Heimpold2021-02-20
| | | | | | This fixes the issue raised after d18692c (libxml2: allow building with iconv support). Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* openconnect: allow specify --protocol from configMengyang Li2020-10-25
| | | | | | | | | | | | | | | openconnect v8.10 supports 4 VPN protocols --protocol=anyconnect Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default) --protocol=nc Compatible with Juniper Network Connect --protocol=gp Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN --protocol=pulse Compatible with Pulse Connect Secure SSL VPN This patch allows user to specify protocol use the new "vpn_protocol" option and deprecate the old option "juniper" which seems to be missing in the current openconnect client. Signed-off-by: Mengyang Li <mayli.he@gmail.com>
* openconnect: updated description to reflect current stateNikos Mavrogiannopoulos2020-09-23
| | | | | | Resolves: #13471 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: allow disable dtls with bool option no_dtlsYousong Zhou2020-08-27
| | | | | | | | | | openconnect may emit following error logs every minute when negotiating with deployments forbidding usage of dtls Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: DTLS handshake failed: Error in the push function. Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: (Is a firewall preventing you from sending UDP packets?) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* [OpenConnect] Update to version 8.10 to address CVE-2020-12823Donald Hoskins2020-06-25
| | | | | | https://nvd.nist.gov/vuln/detail/CVE-2020-12823 Signed-off-by: Donald Hoskins <grommish@gmail.com>
* openconnect: updated to 8.09Nikos Mavrogiannopoulos2020-05-01
| | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: Allow to set `usergroup` option in OpenConnectMarco Gulino2020-04-29
| | | | | | Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using) Signed-off-by: Marco Gulino <marco@gulinux.net>
* openconnect: preserve whitespace in argumentsJo-Philipp Wich2020-02-03
| | | | | | | | | Properly quote arguments when assembling the command line and eval the proto_run_command() invocation in order to prevent the shell from improperly splitting the command arguments on $IFS. Fixes: #10137 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openconnect: update to 8.05DENG Qingfang2019-10-12
| | | | Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* openconnect: allow specifying form_entry listYousong Zhou2019-09-21
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* treewide: add PKG_CPE_ID for better cvescanner coverageJan Pavlinec2019-09-17
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* openconnect: update to 8.04DENG Qingfang2019-08-15
| | | | | | Removed upstream patches Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* openconnect: Fix DTLS with OpenSSLRosen Penev2019-06-24
| | | | | | | | | | | Backported upstream patches that fix this. Removed local patch that fixes libp11 with version 0.4.7, which is not used anymore. Upstream has a different solution. License fixes and Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* openconnect: updated to 8.03Nikos Mavrogiannopoulos2019-05-30
| | | | | | Resolves: #8218 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: updated to 8.01Nikos Mavrogiannopoulos2019-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: build without options we don't supportNikos Mavrogiannopoulos2018-01-20
| | | | | | | | | That is, since we don't require gssapi or libpskc, avoid accidental builds with it. Closes #5474 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: fix compilation against libp11 0.4.7Yousong Zhou2017-12-15
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: support reading password from scriptGavin Ni2017-12-04
| | | | | | | | | "token_mode" add support for "script", which execute "token_script" to get the password. Some token is not supported by OpenConnect natively, e.g. "MobilePass" or "Softoken II" used in Cisco VPN Signed-off-by: Gavin Ni <gisngy@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: re-introduce config: interfaceGavin Ni2017-11-22
| | | | | In some cases, it's useful to specify which interface to establish the VPN connection Signed-off-by: Gavin Ni <gisngy@gmail.com>
* openconnect: add options to support juniperVladimir Berezhnoy2017-11-20
| | | | Signed-off-by: Vladimir Berezhnoy <non7top@gmail.com>
* openconnect: openconnect-wrapper: rewriteYousong Zhou2017-06-19
| | | | | | | | | | | | | | | | | | | - use exec directly to eliminate a level in the process tree - use "$@" instead of "$*" to pass arguments to openconnect According to openconnect(8), openconnect will call vpnc-script to cleanup before quit when it received SIGINT(2) and will quit immediately when it received SIGTERM (the default signal by kill command) Before and after the change, openconnect process will be killed first with SIGINT sent from netifd. This was decided by the 'proto_kill_command "$config" 2' notify call in the proto script. SIGKILL is the only other signal that can be sent from netifd when the process did not quit on SIGINT on time. There should be no need to trap on signal 1 3 6 9 (HUP QUIT ABRT KILL) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: new option mtuYousong Zhou2017-06-18
| | | | | | | | | | | According to openconnect --help output: -m, --mtu=MTU Request MTU from server --base-mtu=MTU Indicate path MTU to/from server Fixes #2099 by allowing setting tunnel mtu Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: drop stale config: interfaceYousong Zhou2017-06-18
| | | | | | | | It was introduced with 41f8d5465 ("openconnect: fix a couple of minor things and add an interface option") and not needed since 4083de9d7 ("openconnect: use proto_add_host_dependency") Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: Bump openconnect to 7.08Qian2017-04-27
| | | | | | | Bump openconnect to 7.08. Remove patch as it is included in the upstream source. Signed-off-by: Qian Sheng billsq@billsq.me
* openconnect: added missing libs for opensslAlberto Bursi2016-10-22
| | | | | added missing libraries to fix issue https://github.com/openwrt/packages/issues/3301 Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* openconnect: updated licenseNikos Mavrogiannopoulos2016-06-16
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: use proto_add_host_dependencyNikos Mavrogiannopoulos2016-05-22
| | | | | | | This ensures that a direct route to the connected host is added by netifd. Resolves #2548
* openconnect: avoid possible implicit dependency on liblz4Jo-Philipp Wich2016-05-19
| | | | | | | | | | | | | | If the liblz4 library exists within the build environment, the openconnect configure will pick it up and start depending on it, leading to the following build error: Package openconnect is missing dependencies for the following libraries: liblz4.so.1 Disable LZ4 support in configure in order to avoid this implicit, nondeterministic dependency. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openconnect: disabled the resolving code from ppp in netifd scriptNikos Mavrogiannopoulos2015-08-26
| | | | | | | That code was causing netifd disabling openconnect with no way to restart it. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: corrected call to proto_add_host_dependencyNikos Mavrogiannopoulos2015-07-07
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated to 7.06 and disabled MIPS16Nikos Mavrogiannopoulos2015-06-17
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: upgraded to 7.05Nikos Mavrogiannopoulos2015-03-14
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: backup hook scripts as wellNikos Mavrogiannopoulos2015-02-17
| | | | | | Resolves #882 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: fix a couple of minor things and add an interface optionDaniel Gimpelevich2015-02-06
| | | | Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
* openconnect: separate out vpnc-scriptsDaniel Gimpelevich2015-02-06
| | | | Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
* openconnect: updated to 7.04Nikos Mavrogiannopoulos2015-01-28
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: use openconnect.upgrade to save configured filesNikos Mavrogiannopoulos2015-01-19
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: bumped versionNikos Mavrogiannopoulos2015-01-17
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated to 7.03Nikos Mavrogiannopoulos2015-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated to 7.02Nikos Mavrogiannopoulos2015-01-03
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: add an option to support stokenFlorian Fainelli2014-12-07
| | | | | | | | | Add a new build configuration option for openconnect and let it link against libstoken if instructed to. Two new uci configuration variables are introduced: "token_mode" and "token_secret" to allow openconnect to use those. Signed-off-by: Florian Fainelli <florian@openwrt.org>
* openconnect: added upstream patch for dynamic IPsNikos Mavrogiannopoulos2014-12-05
| | | | That requires an update to ocserv as well to advertise them.
Powered by cgit, Themed by Ted Yin.