packages/net/openconnect, branch masterMirror of packages feedhttps://git-03.infra.openwrt.org/feed/packages/atom?h=master2026-03-14T07:11:05Zopenconnect: fix token_script error handling/logging
2026-03-14T07:11:05ZThomas Winkler2026-03-10T12:40:28Zurn:sha1:15500a07f836b15916d29f908eca9973d4a9903d
When token_script fails, proto_setup_failed() notifies netifd that
setup has failed, but script execution continues regardless.
This commit adds exit 1 and sleep 5 (consistent with wireguard.sh
error handling) to abort setup on token_script failure. Also fix
typo in logger tag ("openconenct" -> "openconnect").
Signed-off-by: Thomas Winkler <tewinkler86@gmail.com>openconnect: implement --no-external-auth
2026-03-14T07:10:03ZThomas Winkler2026-03-10T12:56:11Zurn:sha1:638335582aa78d363e4fe4e04b8fd1ab8bd98de8
The option prevents OpenConnect from advertising
to the server that it supports any kind of
authentication mode that requires an external
browser. Some servers will force the client to use such
an authentication mode if the client advertises it, but
fallback to a more "scriptable" authentication mode if
the client doesn’t appear to support it.
Signed-off-by: Thomas Winkler <tewinkler86@gmail.com>openconnect: fix off-by-one while condition2025-12-09T09:02:43ZChristian Lamparter2025-12-06T19:53:14Zurn:sha1:e35de9af78e3ce12eb810e8d58be83c850c319d4
resolveip returns 0 on success. This means that the while loop
will just run until all tries are exhausted. But this was not
the intended behaviour.
Fixes: 20ea72607bbf ("openconnect: make host dependency more resilient")
Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
openconnect: introduced script parameter2024-10-31T13:36:39ZYury Potapov2024-10-15T15:14:51Zurn:sha1:185c5f0387ea26c52ebb12ece8fd0f8c0872c5e2
This allows specifying a custom vpnc-compatible config script.
Signed-off-by: Yury Potapov <me@immensus.net>
openconnect: introduced URI parameter2024-05-09T20:25:50ZNikos Mavrogiannopoulos2024-05-09T19:18:44Zurn:sha1:ab8adb7d76d1ee1595311cb88a9b5cdaf34a2a5f
This allows specifying a camouflage string in ocserv.
Fixes: #23364
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
openconnect: backport fix for anyconnect compatibility2024-05-09T19:22:58ZNikos Mavrogiannopoulos2024-05-09T19:00:31Zurn:sha1:75d7b0bf753a7ff6bfed2e49b2c8509a5c99d0d5
Fixes: #21135
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
openconnect: make host dependency more resilient2024-02-16T03:57:48ZNikos Mavrogiannopoulos2024-02-10T13:30:12Zurn:sha1:20ea72607bbf06b6b899a11bbe53955e0bd16550
Retry when resolveip fails as it seems to be causing issues
on startup depending on various unpredictable parameters.
Resolves: #23185
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
openconnect: update to 9.122024-01-03T00:31:21ZRosen Penev2023-12-25T06:01:33Zurn:sha1:02a5264214b2447217a6ca956345166084e0b300
Remove upstream backport and fix libxml 1.12 compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
openconnect: add support for option --pfs2023-10-14T12:30:15ZVladislav Grigoryev2023-10-14T09:25:34Zurn:sha1:4af0378ef91929d060c540f5a146476a6c32beec
Add support for the OpenConnect option `--pfs`.
Designed to require perfect forward secrecy.
Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
treewide: refactor to use PKG_BUILD_FLAGS:=no-mips162023-04-08T06:38:54ZAndre Heider2023-03-23T07:39:01Zurn:sha1:565866a47210c9711c29173052063779b6d3bcfc
See commit 5c545bdb "treewide: replace PKG_USE_MIPS16:=0 with
PKG_BUILD_FLAGS:=no-mips16" on the main repository.
Signed-off-by: Andre Heider <a.heider@gmail.com>