openconnect in android

[Nikos Mavrogiannopoulos]

On 02/28/2013 02:10 PM, David Woodhouse wrote:

> On Thu, 2013-02-28 at 08:01 -0500, Jason Cooper wrote:
>> Wow, that was a while ago.  The (ancient) code is still up on infradead
>> [1] and if you look at the dates, you could probably dig up the patch
>> submissions to this mailing list.
> 
> The OpenConnect parts are all merged. We even gained keystore support
> last June, and an openconnect binary for Android ought to build straight
> out of my git repo.


I couldn't figure out how to do that with the dependencies. Nevertheless
I found cerbero [0] which looks very familiar to me (reminds me of
buildroot) and it seems to be able to cross compile almost any
autoconf-using program on many environments (from ios to android).

[0]. http://lists.gnu.org/archive/html/help-libtasn1/2013-01/msg00002.html

[on another e-mail]

> although it would be great if someone
> would make a package out of it which uses the "new" VPN API in ICS that
> lets it run as non-root. We have the UI side for the authentication
> already; we just need the VPN 'plumbing'...


Indeed, and not only that the CA and user certificates should be read
from the keystorage. I suppose these could be handled by a wrapper app,
but I'm not really sure.

regards,
Nikos