Hi David, These patches will apply cleanly to your gpst branch (currently @ 82d4430da8f593109f90637fafb799a41a937330, http://git.infradead.org/users/dwmw2/openconnect.git/shortlog/refs/heads/gpst) *after* merging the latest changes from your master branch (currently @ fdaba772b27d66f92a3d035d18d7b4e15292f6b9). Even better--I've tested that they build and connect correctly as well. :-D They simplify the gingerly interaction of the HTTPS and ESP tunnels which are necessary for GlobalProtect ESP to work, add tunnel-based rekey, and add support for checking and submitting the "HIP report." HIP is basically GlobalProtect's CSD/TNCC equivalent; the one good thing I'll say about it is that it *doesn't* involve downloading and running a Trojan binary. -Dan Daniel Lenski (3): Improve GPST/ESP not-stepping-on-toes tap dance Add support for tunnel-based rekey for GlobalProtect add support for checking and submitting HIP reports auth-globalprotect.c | 29 ++++++-- gpst.c | 195 +++++++++++++++++++++++++++++++++++++++++++++---- hipreport.sh | 182 +++++++++++++++++++++++++++++++++++++++++++++ mainloop.c | 2 +- openconnect-internal.h | 1 + www/Makefile.am | 2 +- www/features.xml | 2 +- www/globalprotect.xml | 7 ++ www/hip.xml | 89 ++++++++++++++++++++++ 9 files changed, 482 insertions(+), 27 deletions(-) create mode 100755 hipreport.sh create mode 100644 www/hip.xml -- 2.7.4
