Browse Source

openconnect: allow specify --protocol from config

openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
lilik-openwrt-22.03
Mengyang Li 4 years ago
committed by Nikos Mavrogiannopoulos
parent
commit
b6119433a5
3 changed files with 16 additions and 3 deletions
  1. +1
    -1
      net/openconnect/Makefile
  2. +9
    -2
      net/openconnect/README
  3. +6
    -0
      net/openconnect/files/openconnect.sh

+ 1
- 1
net/openconnect/Makefile View File

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=openconnect
PKG_VERSION:=8.10
PKG_RELEASE:=2
PKG_RELEASE:=3
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=ftp://ftp.infradead.org/pub/openconnect/


+ 9
- 2
net/openconnect/README View File

@ -32,8 +32,15 @@ config interface 'MYVPN'
#option token_mode 'script'
#option token_script '/lib/custom/getocpass.sh'
# Juniper vpn support
#option juniper '1'
# For non-anyconnect vpn protocols
# Cisco AnyConnect (default)
#option vpn_protocol 'anyconnect'
# Juniper Network Connect
#option vpn_protocol 'nc'
# Palo Alto Networks GlobalProtect
#option vpn_protocol 'gp'
# Pulse Connect Secure
#option vpn_protocol 'pulse'
# Authentication form responses
#list form_entry FORM:OPT=VAL


+ 6
- 0
net/openconnect/files/openconnect.sh View File

@ -15,6 +15,7 @@ proto_openconnect_init_config() {
proto_config_add_int "port"
proto_config_add_int "mtu"
proto_config_add_int "juniper"
proto_config_add_string "vpn_protocol"
proto_config_add_boolean "no_dtls"
proto_config_add_string "interface"
proto_config_add_string "username"
@ -46,6 +47,7 @@ proto_openconnect_setup() {
form_entry \
interface \
juniper \
vpn_protocol \
mtu \
no_dtls \
os \
@ -93,6 +95,10 @@ proto_openconnect_setup() {
append_args --juniper
fi
[ -n "$vpn_protocol" ] && {
append_args --protocol "$vpn_protocol"
}
[ -n "$serverhash" ] && {
append_args "--servercert=$serverhash"
append_args --no-system-trust


Loading…
Cancel
Save