On Fri, 2014-10-10 at 11:39 +0200, Nikos Mavrogiannopoulos wrote: > Hello, > It seems that openconnect_clear_cookie() only clears the cookie used > for authentication. Shouldn't that also clear any other cookies sent > by the server, i.e., call clear_cookies() as well? Otherwise there is > no other way to clear the server's state and retry. > > My use case is a server (ocserv) on which I tried a password which is > no longer valid. In order to retry a user-provided password I need to > clear all server's state (e.g., cookies), and there is no way to do > that as I see. Would it make sense to extend > openconnect_clear_cookie() for that? Hm, isn't openconnect_clear_cookie() just one of those semi-pointless security things to avoid leaving the cookie around in memory after we're done? I think what you actually want is openconnect_reset_ssl(), which has been used for 'reset everything to base state' by the NetorkManager auth-dialog since the beginning. -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5745 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20141010/feea3840/attachment-0001.bin>
