Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
packages/net/openconnect/Makefile

87 lines
2.5 KiB
Makefile
Raw Normal View History

Added openconnect
2014-06-03 16:18:17 +00:00
#
openconnect: separate out vpnc-scripts Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
2015-02-06 19:03:56 +00:00
# Copyright (C) 2006-2015 OpenWrt.org
Added openconnect
2014-06-03 16:18:17 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=openconnect
[OpenConnect] Update to version 8.10 to address CVE-2020-12823 https://nvd.nist.gov/vuln/detail/CVE-2020-12823 Signed-off-by: Donald Hoskins <grommish@gmail.com>
2020-06-25 06:44:31 +00:00
PKG_VERSION:=8.10
openconnect: allow specify --protocol from config openconnect v8.10 supports 4 VPN protocols --protocol=anyconnect Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default) --protocol=nc Compatible with Juniper Network Connect --protocol=gp Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN --protocol=pulse Compatible with Pulse Connect Secure SSL VPN This patch allows user to specify protocol use the new "vpn_protocol" option and deprecate the old option "juniper" which seems to be missing in the current openconnect client. Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 04:00:40 +00:00
PKG_RELEASE:=3
Added openconnect
2014-06-03 16:18:17 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=ftp://ftp.infradead.org/pub/openconnect/
[OpenConnect] Update to version 8.10 to address CVE-2020-12823 https://nvd.nist.gov/vuln/detail/CVE-2020-12823 Signed-off-by: Donald Hoskins <grommish@gmail.com>
2020-06-25 06:44:31 +00:00
PKG_HASH:=30e64c6eca4be47bbf1d61f53dc003c6621213738d4ea7a35e5cf1ac2de9bab1
openconnect: Fix DTLS with OpenSSL Backported upstream patches that fix this. Removed local patch that fixes libp11 with version 0.4.7, which is not used anymore. Upstream has a different solution. License fixes and Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-24 17:42:33 +00:00
PKG_LICENSE:=LGPL-2.1-or-later
PKG_LICENSE_FILES:=COPYING.LGPL
treewide: add PKG_CPE_ID for better cvescanner coverage Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-12 12:13:21 +00:00
PKG_CPE_ID:=cpe:/a:infradead:openconnect
Added openconnect
2014-06-03 16:18:17 +00:00
openconnect: force rebuild when config changes Signed-off-by: Nicolas Thill <nico@openwrt.org>
2014-10-25 07:32:17 +00:00
PKG_CONFIG_DEPENDS:= \
CONFIG_OPENCONNECT_GNUTLS \
CONFIG_OPENCONNECT_OPENSSL \
openconnect: Fix DTLS with OpenSSL Backported upstream patches that fix this. Removed local patch that fixes libp11 with version 0.4.7, which is not used anymore. Upstream has a different solution. License fixes and Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-24 17:42:33 +00:00
PKG_USE_MIPS16:=0
openconnect: force rebuild when config changes Signed-off-by: Nicolas Thill <nico@openwrt.org>
2014-10-25 07:32:17 +00:00
Added openconnect
2014-06-03 16:18:17 +00:00
include $(INCLUDE_DIR)/package.mk
define Package/openconnect/config
source "$(SOURCE)/Config.in"
endef
define Package/openconnect
SECTION:=net
CATEGORY:=Network
openconnect: updated to 8.01 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2019-01-10 21:11:11 +00:00
DEPENDS:=+libxml2 +kmod-tun +resolveip +vpnc-scripts +OPENCONNECT_OPENSSL:libopenssl +OPENCONNECT_OPENSSL:p11-kit +OPENCONNECT_OPENSSL:libp11 +OPENCONNECT_GNUTLS:libgnutls +OPENCONNECT_GNUTLS:libtasn1 +OPENCONNECT_STOKEN:libstoken
openconnect: add options to support juniper Signed-off-by: Vladimir Berezhnoy <non7top@gmail.com>
2017-11-07 10:11:34 +00:00
TITLE:=OpenConnect VPN client (Cisco AnyConnect and Juniper/Pulse compatible)
Added maintainer Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-07-30 06:35:25 +00:00
MAINTAINER:=Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
openconnect: Fix DTLS with OpenSSL Backported upstream patches that fix this. Removed local patch that fixes libp11 with version 0.4.7, which is not used anymore. Upstream has a different solution. License fixes and Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-06-24 17:42:33 +00:00
URL:=https://www.infradead.org/openconnect/
Added openconnect
2014-06-03 16:18:17 +00:00
SUBMENU:=VPN
endef
define Package/openconnect/description
openconnect: updated description to reflect current state Resolves: #13471 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-23 16:02:26 +00:00
A VPN client compatible with several SSL VPN implementations (ocserv, Cisco AnyConnect, Juniper, Palo Alto)
Added openconnect
2014-06-03 16:18:17 +00:00
openconnect: updated description to reflect current state Resolves: #13471 Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-23 16:02:26 +00:00
OpenConnect is an SSL VPN client initially created to support Cisco's
AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and
the Palo Alto Networks GlobalProtect SSL VPN.
A corresponding OpenConnect VPN server implementation can be found in the
ocserv package.
Added openconnect
2014-06-03 16:18:17 +00:00
endef
CONFIGURE_ARGS += \
--disable-shared \
openconnect: updated to 7.00 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-11-29 10:17:16 +00:00
--with-vpnc-script=/lib/netifd/vpnc-script \
openconnect: add an option to support stoken Add a new build configuration option for openconnect and let it link against libstoken if instructed to. Two new uci configuration variables are introduced: "token_mode" and "token_secret" to allow openconnect to use those. Signed-off-by: Florian Fainelli <florian@openwrt.org>
2014-12-05 06:51:45 +00:00
--without-libpcsclite \
openconnect: avoid possible implicit dependency on liblz4 If the liblz4 library exists within the build environment, the openconnect configure will pick it up and start depending on it, leading to the following build error: Package openconnect is missing dependencies for the following libraries: liblz4.so.1 Disable LZ4 support in configure in order to avoid this implicit, nondeterministic dependency. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-19 09:41:44 +00:00
--without-stoken \
openconnect: build without options we don't support That is, since we don't require gssapi or libpskc, avoid accidental builds with it. Closes #5474 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2018-01-20 22:45:37 +00:00
--without-libpskc \
--without-gssapi \
openconnect: avoid possible implicit dependency on liblz4 If the liblz4 library exists within the build environment, the openconnect configure will pick it up and start depending on it, leading to the following build error: Package openconnect is missing dependencies for the following libraries: liblz4.so.1 Disable LZ4 support in configure in order to avoid this implicit, nondeterministic dependency. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-05-19 09:41:44 +00:00
--without-lz4
Added openconnect
2014-06-03 16:18:17 +00:00
ifeq ($(CONFIG_OPENCONNECT_OPENSSL),y)
CONFIGURE_ARGS += \
--without-gnutls
endif
openconnect: add an option to support stoken Add a new build configuration option for openconnect and let it link against libstoken if instructed to. Two new uci configuration variables are introduced: "token_mode" and "token_secret" to allow openconnect to use those. Signed-off-by: Florian Fainelli <florian@openwrt.org>
2014-12-05 06:51:45 +00:00
ifeq ($(CONFIG_OPENCONNECT_STOKEN),y)
CONFIGURE_ARGS += \
--with-stoken
endif
Added openconnect
2014-06-03 16:18:17 +00:00
define Package/openconnect/install
openconnect: Added configuration options for hash and user cert/key pairs Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-06-04 21:17:54 +00:00
$(INSTALL_DIR) $(1)/etc/openconnect/
Added openconnect
2014-06-03 16:18:17 +00:00
$(INSTALL_DIR) $(1)/lib/netifd/proto
$(INSTALL_BIN) ./files/openconnect.sh $(1)/lib/netifd/proto/
$(INSTALL_DIR) $(1)/usr/sbin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/openconnect $(1)/usr/sbin/
openconnect: set config variable on teardown and correctly pass the password This addresses https://dev.openwrt.org/ticket/16634 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2014-08-31 21:57:47 +00:00
$(INSTALL_BIN) ./files/openconnect-wrapper $(1)/usr/sbin/
openconnect: use openconnect.upgrade to save configured files Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2015-01-19 21:46:12 +00:00
$(INSTALL_DIR) $(1)/lib/upgrade/keep.d
$(INSTALL_DATA) ./files/openconnect.upgrade $(1)/lib/upgrade/keep.d/openconnect
Added openconnect
2014-06-03 16:18:17 +00:00
endef
$(eval $(call BuildPackage,openconnect))
Reference in a new issue Copy permalink