OpenConnect 8.02 release

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



More build fixes for various platforms, including a fix for the fact
that all DTLS connectivity was broken with OpenSSL 1.1.0 or newer.

Add support for Cisco's DTLS v1.2 that they've apparently started using
at least where hardware acceleration hasn't prevented them from
upgrading. This works against ocserv 0.12.2 and appears to behave
identically to the Cisco client, but isn't yet tested directly against
a Cisco ASA.

Add an 'attempt-reconnect' invocation of the vpnc-script, which allows
it to fix up the route to the VPN server, when an underlying connection
flap has left us routing to the VPN *through* the VPN interface.

ftp://ftp.infradead.org/pub/openconnect/openconnect-8.02.tar.gz
ftp://ftp.infradead.org/pub/openconnect/openconnect-8.02.tar.gz.asc

Daniel Lenski (4):
      don't double-include libtasn1.h (breaks Android cross-build)
      decruft esp.c: these headers are only needed for GP's probe-sending/catching (which are in gpst.c now)
      no need to send multiple probe packets as an ESP keepalive
      process split-excludes for GlobalProtect

David GEIGER (1):
      Fix Mageia TSS2_ESYS build

David Woodhouse (30):
      Merge branch 'libtasn1_fix_for_Android' of gitlab.com:dlenski/openconnect
      Fix up building against local static OpenSSL
      OpenSSL: Loop over DTLS ciphersuites looking for the one we asked for.
      Clean up X-DTLS-CipherSuite header generation to allow for DTLSv1.2
      Process X-DTLS12-CipherSuite: header from server
      Add Cisco DTLSv1.2 support for OpenSSL build
      Add Cisco DTLSv1.2 support for GnuTLS build
      Update changelog
      Clean up DTLS cipher selection for OpenSSL >= 1.1.0
      Update contribute page with project ideas
      Add GitLab reference to mail/help page
      Merge branch 'remove_unneeded_headers' of gitlab.com:dlenski/openconnect
      Merge branch 'single_probe_for_keepalive' of gitlab.com:dlenski/openconnect
      Remove obsolete README.DTLS file
      Make TODO file refer to contribute.html web page
      Update translations from GNOME
      Add --dtls12-ciphers option
      Add tmp-distdir make target for CI
      Remove stray pass-CP852 file from EXTRA_DIST
      Make tmp-distdir and build there, as part of CI
      Autogenerate AUTHORS file
      Merge branch 'GP_split_excludes' of gitlab.com:dlenski/openconnect
      Merge branch 'test-installed-openconnect' of gitlab.com:mtmiller/openconnect
      Add vpnc-script locations for FreeBSD and OpenBSD packages
      Update changelog
      Add 'attempt-reconnect' vpnc-script reason
      Merge branch 'hurd' of gitlab.com:mtmiller/openconnect
      Update translations from GNOME
      Resync translations with sources
      Tag version 8.02

Mike Miller (4):
      Allow running test suite on installed openconnect
      Fix build failure on systems missing IPV6_TCLASS
      Define IPV6_TCLASS when it isn't defined on Hurd
      Also define IPV6_TCLASS for older versions of OS X

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5174 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20190116/a88caf79/attachment.bin>


[Index of Archives]     [Linux Samsung SoC]     [Linux Rockchip SoC]     [Linux Actions SoC]     [Linux for Synopsys ARC Processors]     [Linux NFS]     [Linux NILFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]


  Powered by Linux