On Tue, 2019-02-05 at 11:23 -0800, Daniel Lenski wrote: > Great! > > David, > How would you feel about merging in support for the `--request-ip` > option if it's only functional for GlobalProtect right now? (Recall > that our tests on Cisco servers confirm it doesn't work? at least not > on all of them? and it definitely doesn't work with ocserv, nor with > Juniper.) Maybe have it error out if `--request-ip` is specified with > a protocol that doesn't support it? or just warn since it's merely a > "request" anyway? > > Presumably we'd want an API function and protocol feature flags for > this as well. Yeah, let's do it. Let's make it work with ocserv, and with IPv6. For a protocol where we don't even know how to ask, reject the option. For AnyConnect, we can let it be a 'best effort' perhaps? -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5174 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20190206/b511148e/attachment.bin>
