aboutsummaryrefslogtreecommitdiff
path: root/net/openconnect
Commit message (Collapse)AuthorAge
* openconnect: updated description to reflect current stateNikos Mavrogiannopoulos2020-09-23
| | | | | | Resolves: #13471 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: allow disable dtls with bool option no_dtlsYousong Zhou2020-08-27
| | | | | | | | | | openconnect may emit following error logs every minute when negotiating with deployments forbidding usage of dtls Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: DTLS handshake failed: Error in the push function. Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: (Is a firewall preventing you from sending UDP packets?) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: break each var into its own line in orderYousong Zhou2020-08-27
| | | | | | For easier review Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* [OpenConnect] Update to version 8.10 to address CVE-2020-12823Donald Hoskins2020-06-25
| | | | | | https://nvd.nist.gov/vuln/detail/CVE-2020-12823 Signed-off-by: Donald Hoskins <grommish@gmail.com>
* openconnect: updated to 8.09Nikos Mavrogiannopoulos2020-05-01
| | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: Allow to set `usergroup` option in OpenConnectMarco Gulino2020-04-29
| | | | | | Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using) Signed-off-by: Marco Gulino <marco@gulinux.net>
* openconnect: preserve whitespace in argumentsJo-Philipp Wich2020-02-03
| | | | | | | | | Properly quote arguments when assembling the command line and eval the proto_run_command() invocation in order to prevent the shell from improperly splitting the command arguments on $IFS. Fixes: #10137 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openconnect: update to 8.05DENG Qingfang2019-10-12
| | | | Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* openconnect: allow specifying form_entry listYousong Zhou2019-09-21
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* treewide: add PKG_CPE_ID for better cvescanner coverageJan Pavlinec2019-09-17
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* openconnect: update to 8.04DENG Qingfang2019-08-15
| | | | | | Removed upstream patches Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* openconnect: Fix DTLS with OpenSSLRosen Penev2019-06-24
| | | | | | | | | | | Backported upstream patches that fix this. Removed local patch that fixes libp11 with version 0.4.7, which is not used anymore. Upstream has a different solution. License fixes and Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* openconnect: updated to 8.03Nikos Mavrogiannopoulos2019-05-30
| | | | | | Resolves: #8218 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: updated to 8.01Nikos Mavrogiannopoulos2019-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: build without options we don't supportNikos Mavrogiannopoulos2018-01-20
| | | | | | | | | That is, since we don't require gssapi or libpskc, avoid accidental builds with it. Closes #5474 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: fix compilation against libp11 0.4.7Yousong Zhou2017-12-15
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: unify indentation in READMEYousong Zhou2017-12-05
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: support reading password from scriptGavin Ni2017-12-04
| | | | | | | | | "token_mode" add support for "script", which execute "token_script" to get the password. Some token is not supported by OpenConnect natively, e.g. "MobilePass" or "Softoken II" used in Cisco VPN Signed-off-by: Gavin Ni <gisngy@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: re-introduce config: interfaceGavin Ni2017-11-22
| | | | | In some cases, it's useful to specify which interface to establish the VPN connection Signed-off-by: Gavin Ni <gisngy@gmail.com>
* openconnect: add options to support juniperVladimir Berezhnoy2017-11-20
| | | | Signed-off-by: Vladimir Berezhnoy <non7top@gmail.com>
* openconnect: openconnect-wrapper: rewriteYousong Zhou2017-06-19
| | | | | | | | | | | | | | | | | | | - use exec directly to eliminate a level in the process tree - use "$@" instead of "$*" to pass arguments to openconnect According to openconnect(8), openconnect will call vpnc-script to cleanup before quit when it received SIGINT(2) and will quit immediately when it received SIGTERM (the default signal by kill command) Before and after the change, openconnect process will be killed first with SIGINT sent from netifd. This was decided by the 'proto_kill_command "$config" 2' notify call in the proto script. SIGKILL is the only other signal that can be sent from netifd when the process did not quit on SIGINT on time. There should be no need to trap on signal 1 3 6 9 (HUP QUIT ABRT KILL) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: new option mtuYousong Zhou2017-06-18
| | | | | | | | | | | According to openconnect --help output: -m, --mtu=MTU Request MTU from server --base-mtu=MTU Indicate path MTU to/from server Fixes #2099 by allowing setting tunnel mtu Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: drop stale config: interfaceYousong Zhou2017-06-18
| | | | | | | | It was introduced with 41f8d5465 ("openconnect: fix a couple of minor things and add an interface option") and not needed since 4083de9d7 ("openconnect: use proto_add_host_dependency") Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: Bump openconnect to 7.08Qian2017-04-27
| | | | | | | Bump openconnect to 7.08. Remove patch as it is included in the upstream source. Signed-off-by: Qian Sheng billsq@billsq.me
* openconnect: added missing libs for opensslAlberto Bursi2016-10-22
| | | | | added missing libraries to fix issue https://github.com/openwrt/packages/issues/3301 Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* openconnect: updated licenseNikos Mavrogiannopoulos2016-06-16
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: use proto_add_host_dependencyNikos Mavrogiannopoulos2016-05-22
| | | | | | | This ensures that a direct route to the connected host is added by netifd. Resolves #2548
* openconnect: avoid possible implicit dependency on liblz4Jo-Philipp Wich2016-05-19
| | | | | | | | | | | | | | If the liblz4 library exists within the build environment, the openconnect configure will pick it up and start depending on it, leading to the following build error: Package openconnect is missing dependencies for the following libraries: liblz4.so.1 Disable LZ4 support in configure in order to avoid this implicit, nondeterministic dependency. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openconnect: disabled the resolving code from ppp in netifd scriptNikos Mavrogiannopoulos2015-08-26
| | | | | | | That code was causing netifd disabling openconnect with no way to restart it. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: corrected call to proto_add_host_dependencyNikos Mavrogiannopoulos2015-07-07
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated documentationNikos Mavrogiannopoulos2015-06-20
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: allow processing multiple passwords from stdinNikos Mavrogiannopoulos2015-06-20
| | | | | | Resolves #1419 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated to 7.06 and disabled MIPS16Nikos Mavrogiannopoulos2015-06-17
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: allow specifying a custom CSD wrapper scriptFlorian Fainelli2015-04-04
| | | | | | | | Some VPN servers might be configured in a way that a CSD wrapper script is mandatory to complete the authentication process, allow that to be specified for openconnect. Signed-off-by: Florian Fainelli <florian@openwrt.org>
* openconnect: allow specifying "os"Florian Fainelli2015-04-04
| | | | | | | Some servers might be implementing ACLs based on the value specified by openconnect for "os", allow that to be configured. Signed-off-by: Florian Fainelli <florian@openwrt.org>
* openconnect: list the defaultroute optionNikos Mavrogiannopoulos2015-03-29
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: upgraded to 7.05Nikos Mavrogiannopoulos2015-03-14
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: backup hook scripts as wellNikos Mavrogiannopoulos2015-02-17
| | | | | | Resolves #882 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: fix a couple of minor things and add an interface optionDaniel Gimpelevich2015-02-06
| | | | Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
* openconnect: separate out vpnc-scriptsDaniel Gimpelevich2015-02-06
| | | | Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
* openconnect: updated to 7.04Nikos Mavrogiannopoulos2015-01-28
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: use openconnect.upgrade to save configured filesNikos Mavrogiannopoulos2015-01-19
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Revert "openconnect: move certificate files to config/ to add graceful upgrade"Nikos Mavrogiannopoulos2015-01-19
| | | | This reverts commit b53e5bfe875d673fc8a57a4766d7af6fc1b3e074.
* Revert "openconnect: cmdline parameter for CA not moved"Nikos Mavrogiannopoulos2015-01-19
| | | | This reverts commit fa8f5479458ee5163c9907ee3e92d8bd6b62389b.
* openconnect: bumped versionNikos Mavrogiannopoulos2015-01-17
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: cmdline parameter for CA not movedJasper2015-01-16
| | | The location for the server CA file was moved in b53e5bfe875d673fc8a57a4766d7af6fc1b3e074, but the corresponding command line option for opeconnect not updated.
* openconnect: automatically enable rebind for DNS servers sent by VPN serverNikos Mavrogiannopoulos2015-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: move certificate files to config/ to add graceful upgradeNikos Mavrogiannopoulos2015-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: removed unneeded entries from interfaceNikos Mavrogiannopoulos2015-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated to 7.03Nikos Mavrogiannopoulos2015-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Powered by cgit, Themed by Ted Yin.