From 05999937ed85a63057dc03becc98ef18593708e8 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Sat, 29 Nov 2014 19:05:04 +0100 Subject: [PATCH] openconnect: when serverhash or cafile are present, set --no-system-trust Signed-off-by: Nikos Mavrogiannopoulos --- net/openconnect/files/openconnect.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh index 30513f6b4..307e3a758 100755 --- a/net/openconnect/files/openconnect.sh +++ b/net/openconnect/files/openconnect.sh @@ -38,10 +38,10 @@ proto_openconnect_setup() { cmdline="$server$port -i vpn-$config --non-inter --syslog --script /lib/netifd/vpnc-script" - [ -f /etc/openconnect/ca-vpn-$config.pem ] && append cmdline "--cafile /etc/openconnect/ca-vpn-$config.pem" + [ -f /etc/openconnect/ca-vpn-$config.pem ] && append cmdline "--no-system-trust --cafile /etc/openconnect/ca-vpn-$config.pem" [ -f /etc/openconnect/user-cert-vpn-$config.pem ] && append cmdline "-c /etc/openconnect/user-cert-vpn-$config.pem" [ -f /etc/openconnect/user-key-vpn-$config.pem ] && append cmdline "--sslkey /etc/openconnect/user-key-vpn-$config.pem" - [ -n "$serverhash" ] && append cmdline "--servercert=$serverhash" + [ -n "$serverhash" ] && append cmdline "--no-system-trust --servercert=$serverhash" [ -n "$authgroup" ] && append cmdline "--authgroup $authgroup" [ -n "$username" ] && append cmdline "-u $username" [ -n "$password" ] && {