openconnect stoken support not working properly with our form

[Andy Wang]

On Mon, Nov 13, 2017 at 11:57 PM, Kevin Cernekee <cernekee at gmail.com> wrote:
>
> You can delete "Step 1" since oncp_obtain_cookie() isn't annotated the
> same way as cstp_obtain_cookie().
>
<snipped>
>
> This can probably reuse |ret| (otherwise |ret| will be left
> uninitialized).  Be sure to test the case where the user hits Cancel
> on the PIN form, and the case where libstoken returns an error (like
> from a missing stokenrc file).
>
>> +        }
>> +#endif
>> +
>>         resp_buf = buf_alloc();
>>         if (buf_error(resp_buf))
>>                 return -ENOMEM;

Thanks,
I can't figure out how line wrap a diff from git for it to be happy
with gmail so trying the new patch as an attachment.  If the stokenrc
file doesn't exist it exits gracefully with
Can't open ~/.stokenrc file

I'm not sure what you mean by hits cancel on the pin form.  There is
no UI for that in the command line openconnect right?
If you're referring to the networkmanager ui, that was actually my
next step.  The patched openconnect doesn't work there and I can't
figure out why.  I have literally no clue what I'm doing looking at
the network-manager-openconnect repo.  It looks like it mostly uses
libopenconnect to interface, but it also appears to exec an
openconnect binary without the --token-* arguments.
That's where I'm hoping to learn more when I have a bit of time.

Andy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: juniper_stoken.patch
Type: text/x-patch
Size: 1017 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20171115/7f292255/attachment.bin>