cstub crashes

O'Connor, Daniel darius at dons.net.au
Mon Aug 11 06:50:22 PDT 2014


Hi all,
I am trying to get open connect to run on Linux and connect to my work VPN - I already have it running on my OSX laptop and it’s much nicer than any connect, so thanks for all the effort to make it work :)

Unfortunately my employer uses the CSD functionality and I have been unable to get it running on Linux (I get a segfault after it does a bunch of work).

I recognise this isn’t an open connect problem per se, but I am hoping someone has some suggestions for what to try.

I can use the Cisco client but it is considerably more annoying to automate and so on. I ran it under strace to see if I could determine how it did the CSD stuff but it was difficult to trace - I couldn’t find any evidence of vpnagentd execve’ing a separate binary (apart from iptables) so I am at a bit of a loss.

The wrapper runs cstub like so..

cstub -log debug -url "https://HHHHH/CACHE/sdesktop/install/result.htm" -ticket “YYYYYY" -stub "0" -group "" -certhash “XXXXX:" -langsel en

(which works on OSX)

The stack trace is pretty useless - the only thing it shows is PC == NULL so either something jumped to an uninited pointer or something bad happened to the stack.

The last entry in the log file is..
[Mon Aug 11 23:18:39.896 2014][cstub][debug][hs_transport_get] sending get request
[Mon Aug 11 23:18:41.051 2014][cstub][debug][ssl_fingerprint_verify_callback] certinfo[SerialNumber=(ffffffffffffffff) IssuerCN=(RSA Corporate Server CA v2) subjectCN=(vpn-usa-west.emc.com)]
[Mon Aug 11 23:18:41.051 2014][cstub][debug][ssl_fingerprint_verify_callback] Using MD5 hash algorithm.
[Mon Aug 11 23:18:41.051 2014][cstub][debug][ssl_fingerprint_verify_callback] Fingerprints match: Given(9CE3B7DC697B5FDAA01538E4ECA4B741) == Computed(9CE3B7DC697B5FDAA01538E4ECA4B741)

Although it also crashes if it can’t find a way (direct or via proxy) to connect to the server - robust software it ain’t…

Any help greatly appreciated, thanks :)

--
Daniel O'Connor
"The nice thing about standards is that there
are so many of them to choose from."
 -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C




More information about the openconnect-devel mailing list