More build fixes for various platforms, including a fix for the fact that all DTLS connectivity was broken with OpenSSL 1.1.0 or newer. Add support for Cisco's DTLS v1.2 that they've apparently started using at least where hardware acceleration hasn't prevented them from upgrading. This works against ocserv 0.12.2 and appears to behave identically to the Cisco client, but isn't yet tested directly against a Cisco ASA. Add an 'attempt-reconnect' invocation of the vpnc-script, which allows it to fix up the route to the VPN server, when an underlying connection flap has left us routing to the VPN *through* the VPN interface. ftp://ftp.infradead.org/pub/openconnect/openconnect-8.02.tar.gz ftp://ftp.infradead.org/pub/openconnect/openconnect-8.02.tar.gz.asc Daniel Lenski (4): don't double-include libtasn1.h (breaks Android cross-build) decruft esp.c: these headers are only needed for GP's probe-sending/catching (which are in gpst.c now) no need to send multiple probe packets as an ESP keepalive process split-excludes for GlobalProtect David GEIGER (1): Fix Mageia TSS2_ESYS build David Woodhouse (30): Merge branch 'libtasn1_fix_for_Android' of gitlab.com:dlenski/openconnect Fix up building against local static OpenSSL OpenSSL: Loop over DTLS ciphersuites looking for the one we asked for. Clean up X-DTLS-CipherSuite header generation to allow for DTLSv1.2 Process X-DTLS12-CipherSuite: header from server Add Cisco DTLSv1.2 support for OpenSSL build Add Cisco DTLSv1.2 support for GnuTLS build Update changelog Clean up DTLS cipher selection for OpenSSL >= 1.1.0 Update contribute page with project ideas Add GitLab reference to mail/help page Merge branch 'remove_unneeded_headers' of gitlab.com:dlenski/openconnect Merge branch 'single_probe_for_keepalive' of gitlab.com:dlenski/openconnect Remove obsolete README.DTLS file Make TODO file refer to contribute.html web page Update translations from GNOME Add --dtls12-ciphers option Add tmp-distdir make target for CI Remove stray pass-CP852 file from EXTRA_DIST Make tmp-distdir and build there, as part of CI Autogenerate AUTHORS file Merge branch 'GP_split_excludes' of gitlab.com:dlenski/openconnect Merge branch 'test-installed-openconnect' of gitlab.com:mtmiller/openconnect Add vpnc-script locations for FreeBSD and OpenBSD packages Update changelog Add 'attempt-reconnect' vpnc-script reason Merge branch 'hurd' of gitlab.com:mtmiller/openconnect Update translations from GNOME Resync translations with sources Tag version 8.02 Mike Miller (4): Allow running test suite on installed openconnect Fix build failure on systems missing IPV6_TCLASS Define IPV6_TCLASS when it isn't defined on Hurd Also define IPV6_TCLASS for older versions of OS X -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5174 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20190116/a88caf79/attachment.bin>