./net/openconnect [client for Cisco AnyConnect SSL VPN]
[+] Add this package to your ports tracker

[ CVSweb ] [ Homepage ] [ RSS feed ]

Version: 8.02, Package name: openconnect-8.02
Maintained by: Stuart Henderson
Master sites:
Flavors (export FLAVOR=xyz, setenv FLAVOR xyz):
  • light
Description
OpenConnect is an SSL VPN client initially created to support Cisco's
AnyConnect SSL VPN. It has since been ported to support the Juniper SSL
VPN which is now known as Pulse Connect Secure.

An associated project, ocserv, provides a compatible server which is
available separately in packages.

Features include:
- Connection through HTTP/SOCKS5 proxy
- Automatic detection of IPv4 and IPv6 address, routes
- Authentication via HTTP forms and SSL certificates (incl. from PKCS#11)
- Authentication via OATH TOTP or HOTP software tokens or Yubikey OATH
- Data transport over TCP (HTTPS) or UDP (DTLS or ESP)
- Keepalive and Dead Peer Detection on both HTTPS and DTLS
- Automatic update of VPN server list / configuration
- Roaming support, allowing reconnection when the local IP address changes
- LZS/LZ4 compression

Flavors:
light - don't include libproxy, pskc or pcsclite support.


Filesize: 1832.163 KB
Version History (View Complete History)
  • (2019-01-16) Updated to version: openconnect-8.02
  • (2019-01-05) Updated to version: openconnect-8.01
  • (2016-12-14) Updated to version: openconnect-7.08
  • (2016-08-12) Updated to version: openconnect-7.07
  • (2015-03-18) Updated to version: openconnect-7.06
  • (2015-03-15) Updated to version: openconnect-7.05
  • (2015-01-26) Updated to version: openconnect-7.04
  • (2015-01-10) Updated to version: openconnect-7.03
  • (2014-12-13) Updated to version: openconnect-7.01
  • (2014-07-09) Updated to version: openconnect-6.00
[show/hide] View available PLISTS (Can be a lot of data)

CVS Commit History:

   2019-01-16 07:47:22 by Stuart Henderson | Files touched by this commit (2)
Log message:
oops, remove unintentional piece from when I was looking at the previous update.
change "rm -rf" to "rm -r" in post-install so that it's obvious if things change.
   2019-01-16 07:47:22 by Stuart Henderson | Files touched by this commit (2)
Log message:
oops, remove unintentional piece from when I was looking at the previous update.
change "rm -rf" to "rm -r" in post-install so that it's obvious if things change.
   2019-01-16 07:43:19 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-8.02
   2019-01-16 07:43:19 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-8.02
   2019-01-16 07:43:19 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-8.02
   2019-01-05 07:02:12 by Bjorn Ketelaars | Files touched by this commit (3)
Log message:
Update to openconnect-8.01.
Fixes a potential information leak (CVE-2018-20319), and adds some new
features including support for PAN GlobalProtect.
- minor of SHARED_LIBS has been bumped as symbols have been added
- switched HOMEPAGE to https
- drop wrapper scripts that are not useful for us, e.g tncc-wrapper.py
needs the icedtea-web plugin that we don't have and the CSD scripts
involve running a linux binary (suggested by sthen@)
Feedback and OK from sthen@
   2019-01-05 07:02:12 by Bjorn Ketelaars | Files touched by this commit (3)
Log message:
Update to openconnect-8.01.
Fixes a potential information leak (CVE-2018-20319), and adds some new
features including support for PAN GlobalProtect.
- minor of SHARED_LIBS has been bumped as symbols have been added
- switched HOMEPAGE to https
- drop wrapper scripts that are not useful for us, e.g tncc-wrapper.py
needs the icedtea-web plugin that we don't have and the CSD scripts
involve running a linux binary (suggested by sthen@)
Feedback and OK from sthen@
   2019-01-05 07:02:12 by Bjorn Ketelaars | Files touched by this commit (3)
Log message:
Update to openconnect-8.01.
Fixes a potential information leak (CVE-2018-20319), and adds some new
features including support for PAN GlobalProtect.
- minor of SHARED_LIBS has been bumped as symbols have been added
- switched HOMEPAGE to https
- drop wrapper scripts that are not useful for us, e.g tncc-wrapper.py
needs the icedtea-web plugin that we don't have and the CSD scripts
involve running a linux binary (suggested by sthen@)
Feedback and OK from sthen@
   2018-10-24 08:28:14 by Stuart Henderson | Files touched by this commit (740)
Log message:
Add COMPILER lines to c++ ports which currently use the default. Adjust
some existing COMPILER lines with arch restrictions etc. In the usual
case this is now using "COMPILER = base-clang ports-gcc base-gcc" on
ports with c++ libraries in WANTLIB.
This is basically intended to be a noop on architectures using clang
as the system compiler, but help with other architectures where we
currently have many ports knocked out due to building with an unsuitable
compiler -
- some ports require c++11/newer so the GCC version in base that is used
on these archirtectures is too old.
- some ports have conflicts where an executable is built with one compiler
(e.g. gcc from base) but a library dependency is built with a different
one (e.g. gcc from ports), resulted in mixing incompatible libraries in the
same address space.
devel/gmp is intentionally skipped as it's on the path to building gcc -
the c++ library there is unused in ports (and not built by default upstream)
so intending to disable building gmpcxx in a future commit.
   2017-07-26 16:45:35 by Stuart Henderson | Files touched by this commit (937)
Log message:
bump LIBCXX/LIBECXX/COMPILER_LIBCXX ports.
   2017-07-16 13:19:06 by Marc Espie | Files touched by this commit (880)
Log message:
use COMPILER_LIBCXX where applicable
   2017-04-10 05:46:37 by Stuart Henderson | Files touched by this commit (277)
Log message:
use LIBCXX
   2017-02-18 10:33:52 by Antoine Jacoutot | Files touched by this commit (58)
Log message:
Missed bump.
   2017-02-18 10:32:38 by Antoine Jacoutot | Files touched by this commit (60)
Log message:
idn -> idn2 after gnutls WANTLIB change.
   2016-12-13 14:44:14 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-7.08
   2016-12-13 14:44:14 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-7.08
   2016-12-13 14:44:14 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-7.08
   2016-12-02 10:38:33 by Stuart Henderson | Files touched by this commit (2)
Log message:
- introduce a flavour for a version of openconnect with fewer dependencies
(no smartcard/libproxy support, etc)
- update DESCR
   2016-12-02 10:38:33 by Stuart Henderson | Files touched by this commit (2)
Log message:
- introduce a flavour for a version of openconnect with fewer dependencies
(no smartcard/libproxy support, etc)
- update DESCR
   2016-08-12 07:28:49 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-7.07
   2016-08-12 07:28:49 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-7.07
   2016-08-12 07:28:49 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to openconnect-7.07
   2016-07-08 10:48:21 by Stuart Henderson | Files touched by this commit (10)
Log message:
sync WANTLIB
   2015-03-18 09:10:32 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to OpenConnect 7.06, pkg-config fix, improvements to experimental
Juniper Network Connect support, new translation
   2015-03-18 09:10:32 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to OpenConnect 7.06, pkg-config fix, improvements to experimental
Juniper Network Connect support, new translation
   2015-03-18 09:10:32 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to OpenConnect 7.06, pkg-config fix, improvements to experimental
Juniper Network Connect support, new translation
   2015-03-14 15:25:25 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to openconnect-7.05, adding experimental support for Juniper's
Network Connect ssl-vpn protocol. ("we'll probably end up also implementing
Junos Pulse support which actually provides IPv6 rather than only Legacy IP.
But not this week!")
also fix for LZS compression on strict alignment arches and various other
changes.
   2015-03-14 15:25:25 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to openconnect-7.05, adding experimental support for Juniper's
Network Connect ssl-vpn protocol. ("we'll probably end up also implementing
Junos Pulse support which actually provides IPv6 rather than only Legacy IP.
But not this week!")
also fix for LZS compression on strict alignment arches and various other
changes.
   2015-03-14 15:25:25 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to openconnect-7.05, adding experimental support for Juniper's
Network Connect ssl-vpn protocol. ("we'll probably end up also implementing
Junos Pulse support which actually provides IPv6 rather than only Legacy IP.
But not this week!")
also fix for LZS compression on strict alignment arches and various other
changes.
   2015-03-14 15:25:25 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to openconnect-7.05, adding experimental support for Juniper's
Network Connect ssl-vpn protocol. ("we'll probably end up also implementing
Junos Pulse support which actually provides IPv6 rather than only Legacy IP.
But not this week!")
also fix for LZS compression on strict alignment arches and various other
changes.
   2015-02-17 05:13:57 by Stuart Henderson | Files touched by this commit (3)
Log message:
Add a patch from OpenConnect upstream; "If we get an AC_PKT_DISCONN
message with no payload, just skip printing the disconnect reason."
Fixes printing junk and possibly crashing if the server goes away.
Tweak DESCR, mention the open-source server ocserv (port for this is
ready but holding in openbsd-wip until we're done with 5.7).
(Readers might be interested to note that 7.04 is probably the last
version of OpenConnect to only support Cisco's SSL-VPN protocol; the
next version will almost certainly add client support for Juniper's
protocol).
   2015-02-17 05:13:57 by Stuart Henderson | Files touched by this commit (3)
Log message:
Add a patch from OpenConnect upstream; "If we get an AC_PKT_DISCONN
message with no payload, just skip printing the disconnect reason."
Fixes printing junk and possibly crashing if the server goes away.
Tweak DESCR, mention the open-source server ocserv (port for this is
ready but holding in openbsd-wip until we're done with 5.7).
(Readers might be interested to note that 7.04 is probably the last
version of OpenConnect to only support Cisco's SSL-VPN protocol; the
next version will almost certainly add client support for Juniper's
protocol).
   2015-02-17 05:13:57 by Stuart Henderson | Files touched by this commit (3)
Log message:
Add a patch from OpenConnect upstream; "If we get an AC_PKT_DISCONN
message with no payload, just skip printing the disconnect reason."
Fixes printing junk and possibly crashing if the server goes away.
Tweak DESCR, mention the open-source server ocserv (port for this is
ready but holding in openbsd-wip until we're done with 5.7).
(Readers might be interested to note that 7.04 is probably the last
version of OpenConnect to only support Cisco's SSL-VPN protocol; the
next version will almost certainly add client support for Juniper's
protocol).
   2015-01-26 03:59:21 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.04 and tweak DESCR.
   2015-01-26 03:59:21 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.04 and tweak DESCR.
   2015-01-26 03:59:21 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.04 and tweak DESCR.
   2015-01-26 03:59:21 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.04 and tweak DESCR.
   2015-01-26 03:43:26 by Stuart Henderson | Files touched by this commit (1)
Log message:
OpenConnect has hidden deps on pcsc-lite and oath-toolkit-pskc
   2015-01-09 11:39:18 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to openconnect 7.03
   2015-01-09 11:39:18 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to openconnect 7.03
   2014-12-12 14:51:07 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.01
   2014-12-12 14:51:07 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.01
   2014-12-12 14:51:07 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.01
   2014-12-12 14:51:07 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to OpenConnect 7.01