mirror of
https://github.com/novatiq/packages.git
synced 2026-07-20 02:33:03 +01:00
Jasper
6367ee0d0f
The location for the server CA file was moved in b53e5bfe87, but the corresponding command line option for opeconnect not updated.
91 lines
2.9 KiB
Bash
Executable File
91 lines
2.9 KiB
Bash
Executable File
#!/bin/sh
|
|
. /lib/functions.sh
|
|
. ../netifd-proto.sh
|
|
init_proto "$@"
|
|
|
|
proto_openconnect_init_config() {
|
|
proto_config_add_string "server"
|
|
proto_config_add_int "port"
|
|
proto_config_add_string "username"
|
|
proto_config_add_string "serverhash"
|
|
proto_config_add_string "authgroup"
|
|
proto_config_add_string "password"
|
|
no_device=1
|
|
available=1
|
|
}
|
|
|
|
proto_openconnect_setup() {
|
|
local config="$1"
|
|
|
|
json_get_vars server port username serverhash authgroup password vgroup token_mode token_secret
|
|
|
|
grep -q tun /proc/modules || insmod tun
|
|
|
|
logger -t openconnect "initializing..."
|
|
serv_addr=
|
|
for ip in $(resolveip -t 10 "$server"); do
|
|
( proto_add_host_dependency "$config" "$ip" )
|
|
serv_addr=1
|
|
done
|
|
[ -n "$serv_addr" ] || {
|
|
logger -t openconnect "Could not resolve server address: '$server'"
|
|
sleep 60
|
|
proto_setup_failed "$config"
|
|
exit 1
|
|
}
|
|
|
|
[ -n "$port" ] && port=":$port"
|
|
|
|
cmdline="$server$port -i vpn-$config --non-inter --syslog --script /lib/netifd/vpnc-script"
|
|
|
|
# migrate to new config files
|
|
[ -f /etc/openconnect/user-cert-vpn-$config.pem ] && mv "/etc/openconnect/user-cert-vpn-$config.pem" "/etc/config/openconnect-user-cert-vpn-$config.pem"
|
|
[ -f /etc/openconnect/user-key-vpn-$config.pem ] && mv "/etc/openconnect/user-key-vpn-$config.pem" "/etc/config/openconnect-user-key-vpn-$config.pem"
|
|
[ -f /etc/openconnect/ca-vpn-$config.pem ] && mv "/etc/openconnect/ca-vpn-$config.pem" "/etc/config/openconnect-ca-vpn-$config.pem"
|
|
|
|
# read new config files
|
|
[ -f /etc/config/openconnect-user-cert-vpn-$config.pem ] && append cmdline "-c /etc/config/openconnect-user-cert-vpn-$config.pem"
|
|
[ -f /etc/config/openconnect-user-key-vpn-$config.pem ] && append cmdline "--sslkey /etc/config/openconnect-user-key-vpn-$config.pem"
|
|
[ -f /etc/config/openconnect-ca-vpn-$config.pem ] && {
|
|
append cmdline "--cafile /etc/config/openconnect-ca-vpn-$config.pem"
|
|
append cmdline "--no-system-trust"
|
|
}
|
|
|
|
[ -n "$serverhash" ] && {
|
|
append cmdline " --servercert=$serverhash"
|
|
append cmdline "--no-system-trust"
|
|
}
|
|
[ -n "$authgroup" ] && append cmdline "--authgroup $authgroup"
|
|
[ -n "$username" ] && append cmdline "-u $username"
|
|
[ -n "$password" ] && {
|
|
umask 077
|
|
pwfile="/var/run/openconnect-$config.passwd"
|
|
echo "$password" > "$pwfile"
|
|
append cmdline "--passwd-on-stdin"
|
|
}
|
|
|
|
[ -n "$token_mode" ] && append cmdline "--token-mode=$token_mode"
|
|
[ -n "$token_secret" ] && append cmdline "--token-secret=$token_secret"
|
|
|
|
proto_export INTERFACE="$config"
|
|
logger -t openconnect "executing 'openconnect $cmdline'"
|
|
|
|
if [ -f "$pwfile" ]; then
|
|
proto_run_command "$config" /usr/sbin/openconnect-wrapper $pwfile $cmdline
|
|
else
|
|
proto_run_command "$config" /usr/sbin/openconnect $cmdline
|
|
fi
|
|
}
|
|
|
|
proto_openconnect_teardown() {
|
|
local config="$1"
|
|
|
|
pwfile="/var/run/openconnect-$config.passwd"
|
|
|
|
rm -f $pwfile
|
|
logger -t openconnect "bringing down openconnect"
|
|
proto_kill_command "$config" 2
|
|
}
|
|
|
|
add_protocol openconnect
|