On Mon, Nov 13, 2017 at 11:57 PM, Kevin Cernekee <cernekee at gmail.com> wrote: > > You can delete "Step 1" since oncp_obtain_cookie() isn't annotated the > same way as cstp_obtain_cookie(). > <snipped> > > This can probably reuse |ret| (otherwise |ret| will be left > uninitialized). Be sure to test the case where the user hits Cancel > on the PIN form, and the case where libstoken returns an error (like > from a missing stokenrc file). > >> + } >> +#endif >> + >> resp_buf = buf_alloc(); >> if (buf_error(resp_buf)) >> return -ENOMEM; Thanks, I can't figure out how line wrap a diff from git for it to be happy with gmail so trying the new patch as an attachment. If the stokenrc file doesn't exist it exits gracefully with Can't open ~/.stokenrc file I'm not sure what you mean by hits cancel on the pin form. There is no UI for that in the command line openconnect right? If you're referring to the networkmanager ui, that was actually my next step. The patched openconnect doesn't work there and I can't figure out why. I have literally no clue what I'm doing looking at the network-manager-openconnect repo. It looks like it mostly uses libopenconnect to interface, but it also appears to exec an openconnect binary without the --token-* arguments. That's where I'm hoping to learn more when I have a bit of time. Andy -------------- next part -------------- A non-text attachment was scrubbed... Name: juniper_stoken.patch Type: text/x-patch Size: 1017 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20171115/7f292255/attachment.bin>