packages/net/openconnect/files, branch masterMirror of packages feedhttps://git.openwrt.org/feed/packages/atom?h=master2026-03-14T07:11:05Zopenconnect: fix token_script error handling/logging
2026-03-14T07:11:05ZThomas Winkler2026-03-10T12:40:28Zurn:sha1:15500a07f836b15916d29f908eca9973d4a9903d
When token_script fails, proto_setup_failed() notifies netifd that
setup has failed, but script execution continues regardless.
This commit adds exit 1 and sleep 5 (consistent with wireguard.sh
error handling) to abort setup on token_script failure. Also fix
typo in logger tag ("openconenct" -> "openconnect").
Signed-off-by: Thomas Winkler <tewinkler86@gmail.com>openconnect: implement --no-external-auth
2026-03-14T07:10:03ZThomas Winkler2026-03-10T12:56:11Zurn:sha1:638335582aa78d363e4fe4e04b8fd1ab8bd98de8
The option prevents OpenConnect from advertising
to the server that it supports any kind of
authentication mode that requires an external
browser. Some servers will force the client to use such
an authentication mode if the client advertises it, but
fallback to a more "scriptable" authentication mode if
the client doesn’t appear to support it.
Signed-off-by: Thomas Winkler <tewinkler86@gmail.com>openconnect: fix off-by-one while condition2025-12-09T09:02:43ZChristian Lamparter2025-12-06T19:53:14Zurn:sha1:e35de9af78e3ce12eb810e8d58be83c850c319d4
resolveip returns 0 on success. This means that the while loop
will just run until all tries are exhausted. But this was not
the intended behaviour.
Fixes: 20ea72607bbf ("openconnect: make host dependency more resilient")
Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
openconnect: introduced script parameter2024-10-31T13:36:39ZYury Potapov2024-10-15T15:14:51Zurn:sha1:185c5f0387ea26c52ebb12ece8fd0f8c0872c5e2
This allows specifying a custom vpnc-compatible config script.
Signed-off-by: Yury Potapov <me@immensus.net>
openconnect: introduced URI parameter2024-05-09T20:25:50ZNikos Mavrogiannopoulos2024-05-09T19:18:44Zurn:sha1:ab8adb7d76d1ee1595311cb88a9b5cdaf34a2a5f
This allows specifying a camouflage string in ocserv.
Fixes: #23364
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
openconnect: make host dependency more resilient2024-02-16T03:57:48ZNikos Mavrogiannopoulos2024-02-10T13:30:12Zurn:sha1:20ea72607bbf06b6b899a11bbe53955e0bd16550
Retry when resolveip fails as it seems to be causing issues
on startup depending on various unpredictable parameters.
Resolves: #23185
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
openconnect: add support for option --pfs2023-10-14T12:30:15ZVladislav Grigoryev2023-10-14T09:25:34Zurn:sha1:4af0378ef91929d060c540f5a146476a6c32beec
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.
Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
openconnect: Allow reconnect timeout to be specified2022-08-07T15:20:21ZMichael Brown2022-05-28T22:21:10Zurn:sha1:99213e631179437c6209b651c97c05511bceda9a
Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
openconnect: Support use of a proxy server2022-08-07T15:18:18ZMichael Brown2022-05-28T21:57:23Zurn:sha1:5c84d8ceba83b7f017f631a2fed1900b5926869a
Allow connection via a proxy server (required on some sites where
direct outbound HTTP(S) access is not permitted).
Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
openconnect: make the host dependency optional2022-06-01T20:54:13ZRui Salvaterra2022-05-31T07:36:33Zurn:sha1:916fa87c335fd42ac5361f9518c06a609247abb3
According to David Woodhouse, OpenConnect has no issues reconnecting on any
interface. Make the host dependency optional, as it can cause issues in multiple
WAN scenarios.
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>