~mamarley/openconnect/+git/gitlab-main:clearer_error_for_list-system-keys_on_Unix

Last commit made on 2022-05-28
Get this branch:
git clone -b clearer_error_for_list-system-keys_on_Unix https://git.launchpad.net/~mamarley/openconnect/+git/gitlab-main

Branch merges

Branch information

Name:
clearer_error_for_list-system-keys_on_Unix
Repository:
lp:~mamarley/openconnect/+git/gitlab-main

Recent commits

5faed7a... by Dan Lenski

Clearer error for list-system-keys on Unix-like platforms

It appears that the `gnutls_system_key*` functions are only implemented on
Windows currently. Lots of people are likely to test this executable on
Unix-y systems, so we should give a clearer error message.

Signed-off-by: Daniel Lenski <email address hidden>

44a0647... by dwmw2

Import translations from GNOME

Signed-off-by: David Woodhouse <email address hidden>

653ad55... by dwmw2

Detect Array session timeout and exit cleanly

We need to return -EPERM so that we exit cleanly instead of treating it
like a network error and retrying repeatedly.

Signed-off-by: David Woodhouse <email address hidden>

ad2e319... by dwmw2

Looks like Array *does* split packets across TLS records

Signed-off-by: David Woodhouse <email address hidden>

dc7fb9c... by Dimitri Papadopoulos <email address hidden>

Fix constness of character buffers in HKDF/HPKE-related functions

gnutls.c: In function ‘hkdf_sha256_extract_expand’:
gnutls.c:3057:41: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
 3057 | const gnutls_datum_t info_d = { info, infolen };
      | ^~~~

Signed-off-by: Dimitri Papadopoulos <email address hidden>

fd740cf... by dwmw2

Default 'Getting Started' top-level menu to connecting.html

It's basically packaged everywhere; no need to take users to a page on
building by default.

Signed-off-by: David Woodhouse <email address hidden>

17a7e1e... by dwmw2

Update changelog, improve Windows certificate store documentation

Signed-off-by: David Woodhouse <email address hidden>

4a5c4a4... by dwmw2

Attempt to handle multiple IP packets in an Array TLS frame

Fixes: #435

Signed-off-by: David Woodhouse <email address hidden>

17887b5... by dwmw2

Don't install list-system-keys

It breaks the Linux COPR builds since the native RPM doesn't list it as
one of the files that are expected to be installed. And in fact we don't
*want* it installed for Linux as GnuTLS system keys aren't supported on
Linux anyway. So just leave it uninstalled for now. It's in the Windows
installer.

We *will* want to make it available for the GUI installer to use, but
I'm still not sure how to handle that. Since the GUI changes less often
perhaps I should actually pull in the openconnect-gui MinGW package as
a dependency of the openconnect build. Which is backwards really, but
it would allow us to spit out an installer including OpenConnect-GUI
for every libopenconnect build. Not today though...

Signed-off-by: David Woodhouse <email address hidden>

9185643... by dwmw2

Clean up NSIS installation a bit

Move list-system-keys.exe to the top-level directory as it isn't really
a test, and install it as part of the RPM.

Clean up the DLL dependency handling to allow for multiple .exe files as
'roots', and also add a hack to make it possible to include extra files
like openconnect-gui.exe

That required supporting Qt and its plugin DLLs, which isn't strictly
needed in OpenConnect itself but I'll probably lift the same mechanisms
to use them in the mingw-openconnect-gui build, and it's best for them
to remain in sync.

Signed-off-by: David Woodhouse <email address hidden>