aboutsummaryrefslogtreecommitdiff
path: root/net/openconnect
Commit message (Collapse)AuthorAge
* openconnect: make host dependency more resilientNikos Mavrogiannopoulos2024-02-16
| | | | | | | | | Retry when resolveip fails as it seems to be causing issues on startup depending on various unpredictable parameters. Resolves: #23185 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: update to 9.12Rosen Penev2024-01-02
| | | | | | Remove upstream backport and fix libxml 1.12 compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* openconnect: add support for option --pfsVladislav Grigoryev2023-10-14
| | | | | | | Add support for the OpenConnect option `--pfs`. Designed to require perfect forward secrecy. Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
* treewide: refactor to use PKG_BUILD_FLAGS:=no-mips16Andre Heider2023-04-08
| | | | | | | See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with PKG_BUILD_FLAGS:=no-mips16" on the main repository. Signed-off-by: Andre Heider <a.heider@gmail.com>
* openconnect: Allow reconnect timeout to be specifiedMichael Brown2022-08-07
| | | | Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
* openconnect: Support use of a proxy serverMichael Brown2022-08-07
| | | | | | | Allow connection via a proxy server (required on some sites where direct outbound HTTP(S) access is not permitted). Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
* openconnect: make the host dependency optionalRui Salvaterra2022-06-01
| | | | | | | | According to David Woodhouse, OpenConnect has no issues reconnecting on any interface. Make the host dependency optional, as it can cause issues in multiple WAN scenarios. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: avoid using the --juniper switchRui Salvaterra2022-06-01
| | | | | | | | | | The --juniper switch has been deprecated in favour of --protocol=nc. Fix the proto script thusly, while keeping compatibility with existing configurations. Note that, as far as UCI is concerned, if both options juniper and vpn_protocol are specified, the latter takes precedence. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: fix inclusion of netifd proto scriptsRui Salvaterra2022-06-01
| | | | | | This is the preferred way, according to the wiki. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* Revert "openconnect: drop the dependency on resolveip"Rui Salvaterra2022-06-01
| | | | | | | | | Using resolveip is more robust and predictable than depending on nslookup and awk. This reverts commit 131ec7b3bd6895aa3f86f57169dd23c15f174fe2. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: make sure OpenSSL is built with DTLS supportRui Salvaterra2022-05-24
| | | | | | Otherwise, OpenConnect will fail to connect with DTLS. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: don't bother loading the tun moduleRui Salvaterra2022-05-23
| | | | | | If it exists (if it isn't built-in), it will be loaded automatically at boot. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: drop the dependency on resolveipRui Salvaterra2022-05-23
| | | | | | We have nslookup and awk, let's use them. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: fix OpenSSL build without deprecated APIRui Salvaterra2022-05-20
| | | | | | | | Backport a patch in order to allow building OpenConnect against OpenSSL 1.1.x without the need for deprecated API (further fixes will be required for OpenSSL 3.x, though). Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: bump to version 9.01Rui Salvaterra2022-05-12
| | | | | | | | | Now with basic support for the Array Networks SSL VPN protocol. Also fix the OpenSSL build. OpenConnect requires support for deprecated APIs, for the time being, so select them if compiling against OpenSSL. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* openconnect: updated to 8.20Nikos Mavrogiannopoulos2022-02-25
| | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: fix dependencies to iconv/intl (fixes #14734)Michael Heimpold2021-02-20
| | | | | | This fixes the issue raised after d18692c (libxml2: allow building with iconv support). Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* openconnect: Fix secondary password script overwriting primaryFrederick Morlock2021-01-01
| | | | | | When specifying a secondary password script, the output should be appended to the temporary password file and shouldn't overwrite it. If you refer to the case where there is a static secondary password, you can see that the secondary password is appended. Without this fix, only the secondary password is passed to the `openconnect` session. Signed-off-by: Frederick Morlock <FrederickGeek8@gmail.com>
* openconnect: allow specify --protocol from configMengyang Li2020-10-25
| | | | | | | | | | | | | | | openconnect v8.10 supports 4 VPN protocols --protocol=anyconnect Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default) --protocol=nc Compatible with Juniper Network Connect --protocol=gp Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN --protocol=pulse Compatible with Pulse Connect Secure SSL VPN This patch allows user to specify protocol use the new "vpn_protocol" option and deprecate the old option "juniper" which seems to be missing in the current openconnect client. Signed-off-by: Mengyang Li <mayli.he@gmail.com>
* openconnect: updated description to reflect current stateNikos Mavrogiannopoulos2020-09-23
| | | | | | Resolves: #13471 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: allow disable dtls with bool option no_dtlsYousong Zhou2020-08-27
| | | | | | | | | | openconnect may emit following error logs every minute when negotiating with deployments forbidding usage of dtls Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: DTLS handshake failed: Error in the push function. Thu Aug 27 04:11:59 2020 daemon.notice openconnect[12024]: (Is a firewall preventing you from sending UDP packets?) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: break each var into its own line in orderYousong Zhou2020-08-27
| | | | | | For easier review Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* [OpenConnect] Update to version 8.10 to address CVE-2020-12823Donald Hoskins2020-06-25
| | | | | | https://nvd.nist.gov/vuln/detail/CVE-2020-12823 Signed-off-by: Donald Hoskins <grommish@gmail.com>
* openconnect: updated to 8.09Nikos Mavrogiannopoulos2020-05-01
| | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: Allow to set `usergroup` option in OpenConnectMarco Gulino2020-04-29
| | | | | | Just adding the extra option `-g|--usergroup <group>` (required by the VPN server I'm currently using) Signed-off-by: Marco Gulino <marco@gulinux.net>
* openconnect: preserve whitespace in argumentsJo-Philipp Wich2020-02-03
| | | | | | | | | Properly quote arguments when assembling the command line and eval the proto_run_command() invocation in order to prevent the shell from improperly splitting the command arguments on $IFS. Fixes: #10137 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openconnect: update to 8.05DENG Qingfang2019-10-12
| | | | Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* openconnect: allow specifying form_entry listYousong Zhou2019-09-21
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* treewide: add PKG_CPE_ID for better cvescanner coverageJan Pavlinec2019-09-17
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* openconnect: update to 8.04DENG Qingfang2019-08-15
| | | | | | Removed upstream patches Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* openconnect: Fix DTLS with OpenSSLRosen Penev2019-06-24
| | | | | | | | | | | Backported upstream patches that fix this. Removed local patch that fixes libp11 with version 0.4.7, which is not used anymore. Upstream has a different solution. License fixes and Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* openconnect: updated to 8.03Nikos Mavrogiannopoulos2019-05-30
| | | | | | Resolves: #8218 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* openconnect: updated to 8.01Nikos Mavrogiannopoulos2019-01-10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: build without options we don't supportNikos Mavrogiannopoulos2018-01-20
| | | | | | | | | That is, since we don't require gssapi or libpskc, avoid accidental builds with it. Closes #5474 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: fix compilation against libp11 0.4.7Yousong Zhou2017-12-15
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: unify indentation in READMEYousong Zhou2017-12-05
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: support reading password from scriptGavin Ni2017-12-04
| | | | | | | | | "token_mode" add support for "script", which execute "token_script" to get the password. Some token is not supported by OpenConnect natively, e.g. "MobilePass" or "Softoken II" used in Cisco VPN Signed-off-by: Gavin Ni <gisngy@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: re-introduce config: interfaceGavin Ni2017-11-22
| | | | | In some cases, it's useful to specify which interface to establish the VPN connection Signed-off-by: Gavin Ni <gisngy@gmail.com>
* openconnect: add options to support juniperVladimir Berezhnoy2017-11-20
| | | | Signed-off-by: Vladimir Berezhnoy <non7top@gmail.com>
* openconnect: openconnect-wrapper: rewriteYousong Zhou2017-06-19
| | | | | | | | | | | | | | | | | | | - use exec directly to eliminate a level in the process tree - use "$@" instead of "$*" to pass arguments to openconnect According to openconnect(8), openconnect will call vpnc-script to cleanup before quit when it received SIGINT(2) and will quit immediately when it received SIGTERM (the default signal by kill command) Before and after the change, openconnect process will be killed first with SIGINT sent from netifd. This was decided by the 'proto_kill_command "$config" 2' notify call in the proto script. SIGKILL is the only other signal that can be sent from netifd when the process did not quit on SIGINT on time. There should be no need to trap on signal 1 3 6 9 (HUP QUIT ABRT KILL) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: new option mtuYousong Zhou2017-06-18
| | | | | | | | | | | According to openconnect --help output: -m, --mtu=MTU Request MTU from server --base-mtu=MTU Indicate path MTU to/from server Fixes #2099 by allowing setting tunnel mtu Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: drop stale config: interfaceYousong Zhou2017-06-18
| | | | | | | | It was introduced with 41f8d5465 ("openconnect: fix a couple of minor things and add an interface option") and not needed since 4083de9d7 ("openconnect: use proto_add_host_dependency") Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* openconnect: Bump openconnect to 7.08Qian2017-04-27
| | | | | | | Bump openconnect to 7.08. Remove patch as it is included in the upstream source. Signed-off-by: Qian Sheng billsq@billsq.me
* openconnect: added missing libs for opensslAlberto Bursi2016-10-22
| | | | | added missing libraries to fix issue https://github.com/openwrt/packages/issues/3301 Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
* openconnect: updated licenseNikos Mavrogiannopoulos2016-06-16
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: use proto_add_host_dependencyNikos Mavrogiannopoulos2016-05-22
| | | | | | | This ensures that a direct route to the connected host is added by netifd. Resolves #2548
* openconnect: avoid possible implicit dependency on liblz4Jo-Philipp Wich2016-05-19
| | | | | | | | | | | | | | If the liblz4 library exists within the build environment, the openconnect configure will pick it up and start depending on it, leading to the following build error: Package openconnect is missing dependencies for the following libraries: liblz4.so.1 Disable LZ4 support in configure in order to avoid this implicit, nondeterministic dependency. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* openconnect: disabled the resolving code from ppp in netifd scriptNikos Mavrogiannopoulos2015-08-26
| | | | | | | That code was causing netifd disabling openconnect with no way to restart it. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: corrected call to proto_add_host_dependencyNikos Mavrogiannopoulos2015-07-07
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* openconnect: updated documentationNikos Mavrogiannopoulos2015-06-20
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Powered by cgit, Themed by Ted Yin.