OpenConnect 9.11 release

David Woodhouse dwmw2 at infradead.org
Wed May 17 06:40:24 PDT 2023


The CA certificate used for the test suite expired this week, making
all the tests fail. Now bumped to 2050 by which time it'll probably be
someone else's problem.

Also fix a couple of problems with Global Protect — ESP configuration
was broken, and some changes in new servers have highlighted that we
weren't correctly case insensitive when checking for some headers.

This attempts to add external browser support on Windows; it seems to
work under Wine at least.

Fix `openconnect --authenticate` for Pulse with a non-empty path, which
was previously emitting a literal `/(null)` as the path and causing a
connection failure. This would affect the NetworkManager auth dialog
too.

https://www.infradead.org/openconnect/download/openconnect-9.11.tar.gz
https://www.infradead.org/openconnect/download/openconnect-9.11.tar.gz.asc


Daniel Lenski (3):
      Add os-tcp-mtu utility
      Fix broken ESP config parsing for GlobalProtect
      Update changelog

David Woodhouse (19):
      Build release builds as snapshots for COPR
      Fix stray (null) in URL path after Pulse authentication
      Make GCC shut up about unknown pragmas in wintun.h
      Silence warnings about type aliasing when resolving wintun DLL functions
      Consolidate browser spawn functions
      Switch from egrep to 'grep -E'
      Build COPR package with xdg-open
      Attempt to spawn browser on Windows
      Update translations from GNOME
      Fix order-only rule dependency variables
      Add rule to rebuild ca.pem
      Ensure swtpm is started before making CSRs with it
      Change to using key fingerprint for --servercert in tests
      Rebuild all test certificates
      Merge branch 'gpst-xml-config' of gitlab.com:nemo-44/openconnect
      Merge branch 'gpst-xml-config' into 'master'
      Merge branch 'man/external_browser' of gitlab.com:Binary-Eater/openconnect
      Merge branch 'win32-extbrowser' of gitlab.com:openconnect/openconnect
      Tag version 9.11

Dimitri Papadopoulos (1):
      Document that OpenConnect calculates TOTP/HOTP codes on its own

Jan-Michael Brummer (1):
      gpst: Check headers case insensitive

Luca Boccassi (2):
      OBS: softhsm is not available in SUSE
      Merge branch 'softhsm' into 'master'

Rahul Rameshbabu (1):
      Add manpage documentation for --external-browser option

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5965 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20230517/60435d8e/attachment-0001.p7s>


More information about the openconnect-devel mailing list