~mamarley/openconnect/+git/gitlab-main:test_non_ASCII_realm_values_with_Juniper

Last commit made on 2023-07-23
Get this branch:
git clone -b test_non_ASCII_realm_values_with_Juniper https://git.launchpad.net/~mamarley/openconnect/+git/gitlab-main

Branch merges

Branch information

Name:
test_non_ASCII_realm_values_with_Juniper
Repository:
lp:~mamarley/openconnect/+git/gitlab-main

Recent commits

e6a4036... by Dan Lenski

fake-juniper-server: Include literal values of realms in HTML, and test with non-ASCII values

This should help us debug
https://gitlab.com/openconnect/openconnect/-/issues/642, where it appears
that a non-ASCII realm string is being encoded incorrectly in the response
to the server.

Signed-off-by: Daniel Lenski <email address hidden>

5a9a37a... by Dan Lenski

Fix juniper-auth test

In 57160c9f2673adbbe468db137b28da4187549061, I updated
fake-juniper-server.py to use a "persistent" configuration (as already done
for fake GlobalProtect, Fortinet, F5 servers), but thne I somehow forgot to
update the actual juniper-auth test script accordingly.

Signed-off-by: Daniel Lenski <email address hidden>

9d9a33c... by Dan Lenski

Replace broken link with Wayback Machine link

The article "Why TCP Over TCP Is A Bad Idea" is very useful for explaining
why VPNs perform better when using UDP-based transport (DTLS or ESP) rather
than TCP-based transport (TLS), but unfortunately the original site is no
longer available.

Replace it with a link to the Internet Archive's Waback Machine, specifically
https://web.archive.org/web/20230228035749/http://sites.inka.de/~W1011/devel/tcp-tcp.html

Signed-off-by: Daniel Lenski <email address hidden>

5796277... by Dimitri Papadopoulos <email address hidden>

Fix broken link to Juniper PDF

Signed-off-by: Dimitri Papadopoulos <email address hidden>

0e5a69e... by Dan Lenski

Merge branch 'send_OS_info_to_Pulse_server' into 'master'

OpenConnect should report the client operating system to Pulse servers

See merge request openconnect/openconnect!481

2b61f99... by Dan Lenski

More comments on contents of hard-coded oNCP packets

Signed-off-by: Daniel Lenski <email address hidden>

272ca80... by Dan Lenski

Merge branch 'handle_Pulse_main_config_packet_up_to_1_MiB' into 'master'

Handle Pulse main config packets up to 1 MiB

See merge request openconnect/openconnect!480

8edb3ab... by Dimitri Papadopoulos <email address hidden>

Use suggested package summary everywhere

Signed-off-by: Dimitri Papadopoulos <email address hidden>

1c5302f... by Dimitri Papadopoulos <email address hidden>

Update supported protocols

* Standardise on Array Networks, not Array Networks AG

  From https://arraynetworks.com/ssl-vpn/:

  > Array SSL VPN gateways provide secure remote access to
  > applications, desktops, file shares, networks, and Web
  > sites from a broad range of remote and mobile devices.
  > Deployed at the network perimeter or in front of
  > business-critical resources, the AG provides secure
  > remote access for employees, guests, partners, and
  > other communities of interest. SSL VPNs are ideal for
  > simplifying the user experience while reducing potential
  > attack vectors.
  >
  > Every AG SSL VPN provides a complete secure access
  > feature set, including TLS encrypted connectivity,
  > device validation, endpoint and server-side security,
  > advanced AAA, and granular policy controls. Available
  > as physical or virtual appliances, or on your choice
  > of public cloud, the AG Series is ideal for businesses
  > needing enterprise-wide remote access, and for cloud
  > service providers needing flexible remote access to
  > meet broad ranging customer requirements.

  I think AG refers to the gateway series that support SSL VPN,
  not to the protocol.
* PAN → Palo Alto Networks

  End-users may not know of this abbreviation, which is not
  used in the documentation and marketing material.
* Add Ivanti to Pulse Connect Secure
* List these protocols separately:
  - Juniper Network Connect
  - Pulse/Ivanti Connect Secure

Signed-off-by: Dimitri Papadopoulos <email address hidden>

ff86be7... by Dan Lenski

Update changelog

Signed-off-by: Daniel Lenski <email address hidden>