9b0fce23d1
By using the netifd for open fortivpn we are able to set up multiple
VPN connections and manage them through the netifd toolset.
This also adds support for binding an openfortivpn client to a given
interface, in which case when that interface comes online, the vpn
will be initiated via a hotplug script.
This is a breaking commit and configurations will need to be migrated
from openfortivpn.config into the /etc/config/networks.
Example configuration via /etc/config/network:
config interface 'ftvpn'
option proto 'openfortivpn'
option server 'example.com'
option username 'USERNAME'
option password 'PASSWORD'
# optional arguments follow
option local_ip '192.0.5.1'
option port '443'
option iface_name 'wan'
option trusted_cert 'CERT_HASH'
option set_dns '0'
option pppd_use_peerdns '0'
option metric '10'
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
65 lines
1.8 KiB
Makefile
65 lines
1.8 KiB
Makefile
#
|
|
# Copyright (C) 2019 - Lucian Cristian <lucian.cristian@gmail.com>
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v3.
|
|
# See /LICENSE for more information.
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=openfortivpn
|
|
PKG_VERSION:=1.14.1
|
|
PKG_RELEASE:=1
|
|
|
|
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
|
|
PKG_SOURCE_URL:=https://codeload.github.com/adrienverge/openfortivpn/tar.gz/v$(PKG_VERSION)?
|
|
PKG_HASH:=bc62fc6ecaaa6c6f8f2510e14a067a0cb9762158d9460c04555990bba44b50ca
|
|
|
|
PKG_MAINTAINER:=Lucian Cristian <lucian.cristian@gmail.com>
|
|
PKG_LICENSE:=GPL-3.0-or-later OpenSSL
|
|
PKG_LICENSE_FILES:=LICENSE LICENSE.OpenSSL
|
|
|
|
PKG_BUILD_PARALLEL:=1
|
|
PKG_INSTALL:=1
|
|
|
|
PKG_FIXUP:=autoreconf
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/openfortivpn
|
|
SUBMENU:=VPN
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
TITLE:=Fortinet SSL VPN client
|
|
URL:=https://github.com/adrienverge/openfortivpn
|
|
DEPENDS:=+ppp +libopenssl +resolveip
|
|
endef
|
|
|
|
define Package/openfortivpn/description
|
|
An open implementation of Fortinet's proprietary PPP+SSL VPN solution
|
|
It spawns a pppd process and operates the communication between the gateway and this process.
|
|
It is compatible with Fortinet VPNs.
|
|
endef
|
|
|
|
CONFIGURE_ARGS += \
|
|
--enable-proc \
|
|
--with-rt_dst="yes" \
|
|
--disable-resolvconf \
|
|
--with-resolvconf=DISABLED \
|
|
--with-pppd="/usr/sbin/pppd"
|
|
|
|
TARGET_LDFLAGS += -Wl,--gc-sections,--as-needed
|
|
|
|
define Package/openfortivpn/install
|
|
$(INSTALL_DIR) \
|
|
$(1)/usr/sbin \
|
|
$(1)/lib/netifd/proto \
|
|
$(1)/etc/hotplug.d/iface
|
|
|
|
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/openfortivpn $(1)/usr/sbin/
|
|
$(INSTALL_BIN) ./files/openfortivpn-wrapper $(1)/usr/sbin/
|
|
$(INSTALL_BIN) ./files/openfortivpn.sh $(1)/lib/netifd/proto/
|
|
$(INSTALL_BIN) ./files/14-openforticlient $(1)/etc/hotplug.d/iface/
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,openfortivpn))
|