~mamarley/openconnect/+git/gitlab-main:new_nx

Last commit made on 2021-04-12
Get this branch:
git clone -b new_nx https://git.launchpad.net/~mamarley/openconnect/+git/gitlab-main

Branch merges

Branch information

Recent commits

74948f8... by Dan Lenski

clean up memory error (caught by static analyzer)

Signed-off-by: Daniel Lenski <email address hidden>

e659f8e... by Andreas Gnau

NX: Implement parsing of connection info

Includes amongst others DNS and routes for IPv4 and IPv6. The IPv4
address is negotiated via IPCP.
Tested for IPv4, but IPv6 should work based on existing traces.

Signed-off-by: Andreas Gnau <email address hidden>

e0b5412... by Andreas Gnau

Add initial SonicWall NetExtender support

LCP works, no error handling yet.

[April 2021] DL refactored from
https://gitlab.com/openconnect/openconnect/-/commit/0f64527489cc49d56d301b19f0fbfda215ce0a87
onto latest master PPP structure, incorporating the comments from Gitlab, and clarifying
that the little-endian 32-bit length in the header should be the entire PPP
packet length (based on
https://github.com/abrasive/nxBender/blob/master/nxbender/sslconn.py#L112).

Signed-off-by: Andreas Gnau <email address hidden>
Signed-off-by: Daniel Lenski <email address hidden>

7b6103e... by dwmw2

Add 'proto' integer value to struct vpn_proto

Despite making no mention of this in the commit message, commit
423449253 ("rename (resp_buf, form_buf) → (req_buf, resp_buf) in f5.c
and fortinet.c") added a 'flavor' field to a bunch of functions in
auth-html.c and passed it through from the protocol code to indicate
some protocol-specific quirks for form parsing.

Until then, we had mostly structured the code so that there weren't many
cases where 'core' code needed to behave differently depending on the
protocol. There was only one case, in fact, to handle the stupid Pulse
ESP address family bug. That one *used* to check which protocol was in
use by comparing proto->udp_send_probes with &oncp_esp_send_probes.

So, add an integer 'proto' field to struct vpn_proto so it can be
checked without a strcmp. Remove the now-redundant 'flavor' field from
all those functions in auth-html.c since it's now in the vpninfo, and
make the ESP code check that for NC|PULSE too instead of the trick of
checking the proto->udp_send_probes function. Which was kind of icky.

Signed-off-by: David Woodhouse <email address hidden>

516de41... by dwmw2

Update main web page

Signed-off-by: David Woodhouse <email address hidden>

363fd53... by dwmw2

Revert "www: updated links to vpnc-script"

This reverts commit 1db8a2f592472357d405e3c5cca3f61aa05f3a1a.

18f11ca... by Dan Lenski

Reference F5 and Fortinet support in manual page

Also, update the link to the modern vpnc-script, which was already updated in the other docs in 1db8a2f592472357d405e3c5cca3f61aa05f3a1a.

Signed-off-by: Daniel Lenski <email address hidden>

a129573... by dwmw2

Fix link to Jailbreak

Signed-off-by: David Woodhouse <email address hidden>

4243cd8... by Dan Lenski

Update README.md (developer-facing docs on GitLab)

Signed-off-by: Daniel Lenski <email address hidden>

f1baf36... by Dan Lenski

Multi-protocol support documentation

Mention F5 and Fortinet on the index page, explain the multi-protocol design
philosophy a bit more, and add a page with a concise list of the supported
protocols.

Signed-off-by: Daniel Lenski <email address hidden>