Commit Graph

44 Commits

Author SHA1 Message Date
Jan Pavlinec 299e5b0a9b
treewide: add PKG_CPE_ID for better cvescanner coverage
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-17 12:40:26 +02:00
DENG Qingfang 2c24c1a09e openconnect: update to 8.04
Removed upstream patches

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-08-15 03:07:42 +08:00
Rosen Penev 6dbbc17b1f openconnect: Fix DTLS with OpenSSL
Backported upstream patches that fix this.

Removed local patch that fixes libp11 with version 0.4.7, which is not
used anymore. Upstream has a different solution.

License fixes and Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-24 10:58:20 -07:00
Nikos Mavrogiannopoulos ebb45bb559 openconnect: updated to 8.03
Resolves: #8218

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2019-05-30 07:31:22 +02:00
Nikos Mavrogiannopoulos 561401ad43 openconnect: updated to 8.01
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2019-01-10 22:16:36 +01:00
Nikos Mavrogiannopoulos aa93ca86db openconnect: build without options we don't support
That is, since we don't require gssapi or libpskc, avoid
accidental builds with it.

Closes #5474

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2018-01-20 23:47:44 +01:00
Yousong Zhou 0d2f9d9bd6 openconnect: fix compilation against libp11 0.4.7
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-15 09:50:26 +08:00
Gavin Ni ede858fb5d openconnect: support reading password from script
"token_mode" add support for "script", which execute "token_script" to
get the password.  Some token is not supported by OpenConnect natively,
e.g. "MobilePass" or "Softoken II" used in Cisco VPN

Signed-off-by: Gavin Ni <gisngy@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-04 16:00:46 +08:00
Gavin Ni 5d216df6cd openconnect: re-introduce config: interface
In some cases, it's useful to specify which interface to establish the VPN connection

Signed-off-by: Gavin Ni <gisngy@gmail.com>
2017-11-22 10:10:22 +08:00
Vladimir Berezhnoy d710c629e8
openconnect: add options to support juniper
Signed-off-by: Vladimir Berezhnoy <non7top@gmail.com>
2017-11-20 14:03:28 +03:00
Yousong Zhou dbc36c3092 openconnect: openconnect-wrapper: rewrite
- use exec directly to eliminate a level in the process tree
 - use "$@" instead of "$*" to pass arguments to openconnect

According to openconnect(8), openconnect will call vpnc-script to
cleanup before quit when it received SIGINT(2) and will quit immediately
when it received SIGTERM (the default signal by kill command)

Before and after the change, openconnect process will be killed first
with SIGINT sent from netifd.  This was decided by the
'proto_kill_command "$config" 2' notify call in the proto script.

SIGKILL is the only other signal that can be sent from netifd when the
process did not quit on SIGINT on time.  There should be no need to trap
on signal 1 3 6 9 (HUP QUIT ABRT KILL)

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-06-19 12:37:24 +08:00
Yousong Zhou 4034e9ee21 openconnect: new option mtu
According to openconnect --help output:

  -m, --mtu=MTU                   Request MTU from server
      --base-mtu=MTU              Indicate path MTU to/from server

Fixes #2099 by allowing setting tunnel mtu

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-06-18 13:10:34 +02:00
Yousong Zhou 4b3fde326c openconnect: drop stale config: interface
It was introduced with 41f8d5465 ("openconnect: fix a couple of minor
things and add an interface option") and not needed since 4083de9d7
("openconnect: use proto_add_host_dependency")

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-06-18 13:10:34 +02:00
Qian 16dc3319b5 openconnect: Bump openconnect to 7.08
Bump openconnect to 7.08. Remove patch as it is included in the
upstream source.

Signed-off-by: Qian Sheng billsq@billsq.me
2017-04-27 01:16:05 -07:00
Alberto Bursi 493ea1afb4 openconnect: added missing libs for openssl
added missing libraries to fix issue https://github.com/openwrt/packages/issues/3301

Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
2016-10-22 14:05:16 +02:00
Nikos Mavrogiannopoulos 5731b8e09b openconnect: updated license
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-06-16 22:36:31 +02:00
Nikos Mavrogiannopoulos 4083de9d74 openconnect: use proto_add_host_dependency
This ensures that a direct route to the connected host is added
by netifd.

Resolves #2548
2016-05-22 17:42:34 +02:00
Jo-Philipp Wich 06d9094348 openconnect: avoid possible implicit dependency on liblz4
If the liblz4 library exists within the build environment, the openconnect
configure will pick it up and start depending on it, leading to the following
build error:

    Package openconnect is missing dependencies for the following libraries:
    liblz4.so.1

Disable LZ4 support in configure in order to avoid this implicit,
nondeterministic dependency.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-19 11:41:44 +02:00
Nikos Mavrogiannopoulos 8661ebeefa openconnect: disabled the resolving code from ppp in netifd script
That code was causing netifd disabling openconnect with no way
to restart it.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-08-26 22:59:31 +02:00
Nikos Mavrogiannopoulos 2765d7b779 openconnect: corrected call to proto_add_host_dependency
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-07-07 22:48:44 +02:00
Nikos Mavrogiannopoulos 00671e854d openconnect: updated to 7.06 and disabled MIPS16
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-06-17 22:06:52 +02:00
Nikos Mavrogiannopoulos 678e0e46f0 openconnect: upgraded to 7.05
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-03-14 14:12:03 +01:00
Nikos Mavrogiannopoulos 21e433324e openconnect: backup hook scripts as well
Resolves #882

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-02-17 22:11:52 +01:00
Daniel Gimpelevich 41f8d54650 openconnect: fix a couple of minor things and add an interface option
Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
2015-02-06 11:54:39 -08:00
Daniel Gimpelevich a904a173ed openconnect: separate out vpnc-scripts
Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
2015-02-06 11:03:56 -08:00
Nikos Mavrogiannopoulos 1ed01ba09e openconnect: updated to 7.04
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-28 20:31:43 +01:00
Nikos Mavrogiannopoulos 500db547b8 openconnect: use openconnect.upgrade to save configured files
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 23:15:57 +01:00
Nikos Mavrogiannopoulos 66d6ba168d openconnect: bumped version
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-17 09:15:39 +01:00
Nikos Mavrogiannopoulos 66cf9c34eb openconnect: updated to 7.03
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-10 11:00:30 +01:00
Nikos Mavrogiannopoulos d647bd3464 openconnect: updated to 7.02
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-03 18:58:39 +01:00
Florian Fainelli a54d31ed3f openconnect: add an option to support stoken
Add a new build configuration option for openconnect and let it link
against libstoken if instructed to. Two new uci configuration variables
are introduced: "token_mode" and "token_secret" to allow openconnect to
use those.

Signed-off-by: Florian Fainelli <florian@openwrt.org>
2014-12-07 21:18:52 -08:00
Nikos Mavrogiannopoulos 9ea507c3ab openconnect: added upstream patch for dynamic IPs
That requires an update to ocserv as well to advertise them.
2014-12-05 20:01:32 +01:00
Nikos Mavrogiannopoulos be753f0208 openconnect: made server IP resolving on reconnection conditional
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-29 19:00:18 +01:00
Nikos Mavrogiannopoulos efcae14f20 openconnect: updated to 7.00
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-29 11:17:27 +01:00
Nikos Mavrogiannopoulos a412f2cc46 openconnect: forward SIGINT to app
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-10-28 11:58:52 +01:00
Nicolas Thill a31ad62a7b openconnect: force rebuild when config changes
Signed-off-by: Nicolas Thill <nico@openwrt.org>
2014-10-25 09:40:56 +02:00
Nikos Mavrogiannopoulos e9215bf85d openconnect: set config variable on teardown and correctly pass the password
This addresses https://dev.openwrt.org/ticket/16634

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-09-01 00:26:39 +02:00
Nikos Mavrogiannopoulos ca32200785 Added maintainer
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-07-30 08:35:31 +02:00
Nikos Mavrogiannopoulos fa34d7ec9f openconnect: added fix for handshake timeout
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-07-26 10:13:46 +02:00
Nikos Mavrogiannopoulos 65718af1fc openconnect: updated description
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-07-21 19:13:39 +02:00
Nikos Mavrogiannopoulos 29c41c4a84 openconnect: upgraded to 6.00
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-07-08 20:04:17 +02:00
Nikos Mavrogiannopoulos e86c668446 openconnect: updated description
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-07-06 15:07:02 +02:00
Nikos Mavrogiannopoulos 51c1c55125 openconnect: Added configuration options for hash and user cert/key pairs
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-06-04 23:18:02 +02:00
Nikos Mavrogiannopoulos af551b6683 Added openconnect 2014-06-03 18:18:17 +02:00