--- /dev/null
+openconnect (8.06-1~bionic1) bionic; urgency=medium
+
+ [ David Woodhouse ]
+ * New upstream version 8.06
+
+ -- David Woodhouse <dwmw2@infradead.org> Thu, 2 Apr 2020 16:58:23 +0100
+
+openconnect (8.05-1) unstable; urgency=medium
+
+ [ Debian Janitor ]
+ * Use secure URI in Homepage field.
+ * Update standards version to 4.4.1, no changes needed.
+
+ [ Luca Boccassi ]
+ * Update upstream source from tag 'upstream/8.05' (Closes: #935198)
+ * Drop patches, merged upstream in v8.05
+ * Build-depend on Python3, v8.05 can build documentation with it now
+ (Closes: #937197)
+ * Set Rules-Requires-Root: no
+ * Bump Standards-Version to 4.5.0, no changes
+ * Add myself to Uploaders
+ * Addn Lintian override for hipreport-android.sh
+ * Drop rules for dbgsym migration
+ * Add libopenconnect.la to d/not-installed
+
+ -- Luca Boccassi <bluca@debian.org> Thu, 19 Mar 2020 19:13:13 +0000
+
+openconnect (8.02-1.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Close HTTPS connection on failure returns from process_http_response()
+ * Fix buffer overflow with chunked HTTP handling (CVE-2019-16239)
+ (Closes: #940871)
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Sat, 18 Jan 2020 23:37:24 +0100
+
+openconnect (8.02-1) unstable; urgency=medium
+
+ [ Mike Miller ]
+ * New upstream version 8.02
+ * d/p/fix-ftbfs-ipv6-tclass-undeclared.patch: Drop patch, applied upstream
+ * d/u/signing-key.asc: Use export-minimal to compact upstream release
+ signing key
+ * d/watch: Bump format version to 4
+ * Add autopkgtest to run the upstream test suite
+
+ [ Daniel Lenski ]
+ * Update package descriptions to reflect multi-protocol support
+
+ -- Mike Miller <mtmiller@debian.org> Fri, 25 Jan 2019 23:11:38 -0800
+
+openconnect (8.01-1) unstable; urgency=medium
+
+ * New upstream version 8.01 (Closes: #918529)
+ * Drop patches applied upstream or no longer needed
+ - d/p/add-logout-juniper.patch, applied upstream
+ - d/p/fix-tests-shell-syntax.patch, applied upstream
+ - d/p/softhsm2-module-workaround.patch, no longer needed
+ * d/libopenconnect5.{shlibs,symbols}: Update for new release
+ * d/libopenconnect5.symbols: Add Build-Depends-Package field
+ * d/openconnect.install: Include usr/libexec/openconnect shell scripts
+ * d/copyright: Refresh copyright information for new upstream release
+ * Add Build-Depends on libgcrypt20-dev, libtasn1-6-dev, and libtss2-dev
+ * Update Build-Depends on ocserv (>= 0.12.1-2) to fix failing unit tests
+ (Closes: #917715)
+ * Add Build-Depends on locales-all <!nocheck> for new test
+ * Add Build-Depends on debhelper-compat, delete d/compat
+ * Bump debhelper compatibility level to 12
+ * d/rules:
+ - Build with --disable-dsa-tests to skip DSA keys in unit tests
+ - Drop unsupported dh --list-missing option
+ - Include /usr/share/dpkg/pkg-info.mk for package version
+ - Drop cruft trying to save and restore generated source files
+ - Drop obsolete configure options --disable-static and --with-system-cafile
+ * d/clean: Delete autogenerated version.c on clean
+ * d/s/options: Ignore changes to tokens as a side effect of running tests
+ * Bump Standards-Version to 4.3.0, no changes needed
+
+ -- Mike Miller <mtmiller@debian.org> Thu, 10 Jan 2019 11:54:02 -0800
+
+openconnect (7.08-3) unstable; urgency=medium
+
+ * d/p/add-logout-juniper.patch: New patch, add logout to Juniper VPN.
+ Thanks to Daniel Lenski (LP: #1655279)
+
+ -- Mike Miller <mtmiller@debian.org> Sun, 25 Feb 2018 15:00:56 -0800
+
+openconnect (7.08-2) unstable; urgency=medium
+
+ * d/p/fix-ftbfs-ipv6-tclass-undeclared.patch: New patch, fix FTBFS on GNU/Hurd
+ * d/control, d/rules: Migrate to automatic dbgsym packages
+ * Bump debhelper compatibility level to 11
+ * d/copyright: Bump copyright to 2018 for debian/*
+ * d/control:
+ - Mention Pulse Connect and Juniper in Description (Closes: #881338)
+ - Update Vcs-* fields for migration to salsa.d.o
+ - Bump Standards-Version to 4.1.3, no changes needed
+
+ -- Mike Miller <mtmiller@debian.org> Fri, 23 Feb 2018 15:28:37 -0800
+
+openconnect (7.08-1) unstable; urgency=medium
+
+ * New upstream version 7.08
+ - Fix MTU detection (Closes: #847135)
+ * d/libopenconnect5.{shlibs,symbols}: Update for new release
+ * d/p/juniper-content-length.patch: Drop, applied upstream
+ * d/p/fix-tests-shell-syntax.patch: Fix test suite shell bashisms
+ * d/p/softhsm2-module-workaround.patch: Hard-code Debian location of
+ libsofthsm2.so
+ * d/control:
+ - Add Build-Depends: libsocket-wrapper, libuid-wrapper, ocserv, openssl, and
+ softhsm2 for test suite
+ - Add Build-Depends: libpcsclite-dev to enable Yubikey support
+ (LP: #1649227)
+ - Add Build-Depends: dpkg-dev (>= 1.17.14) for build profiles support
+ - Drop obsolete Build-Depends: liboath-dev
+ - Reorder fields according to "cme fix dpkg-control"
+ * Bump debhelper compatibility level to 10
+ * Drop explicit dependency on dh-autoreconf and disabling silent rules, now
+ enabled by default
+
+ -- Mike Miller <mtmiller@debian.org> Sat, 24 Dec 2016 10:50:15 -0800
+
+openconnect (7.07-2) unstable; urgency=medium
+
+ * d/rules: Build with --as-needed to remove indirect lib dependencies
+ * d/control: Add Depends: liblz4-dev for libopenconnect-dev (Closes: 846706)
+ * d/control: Use canonical repository URL for Vcs-Browser
+ * d/copyright: Refresh copyright information
+ * d/copyright: Update Format using "cme fix dpkg-copyright"
+
+ -- Mike Miller <mtmiller@debian.org> Thu, 08 Dec 2016 15:05:19 -0800
+
+openconnect (7.07-1) unstable; urgency=medium
+
+ * New upstream release.
+ - Fix spelling of "sí" in Spanish translation. (Closes: #792073)
+ - Fix handling of KMP message with --juniper. (Closes: #833466)
+ * Add Build-Depends on libkrb5-dev, enables GSSAPI support. (Closes: #830905)
+ * d/p/juniper-content-length.patch: Add Content-Length header to mimic
+ official pulse client. (Closes: #845184)
+ * Update libopenconnect5 shlibs and symbols files.
+ * debian/rules: Update list of distributed files to back up and restore.
+ * Use https URI for Vcs-* control fields.
+ * Bump Standards-Version to 3.9.8. No changes needed.
+
+ -- Mike Miller <mtmiller@debian.org> Fri, 25 Nov 2016 12:22:01 -0800
+
+openconnect (7.06-2) unstable; urgency=medium
+
+ * Upload to unstable.
+
+ -- Mike Miller <mtmiller@debian.org> Mon, 25 May 2015 17:32:01 -0400
+
+openconnect (7.06-1) experimental; urgency=medium
+
+ * New upstream release. (Closes: #776235)
+ * Bump libopenconnect soname (3 -> 5) and update symbols file.
+ * Add Build-Depends on liblz4-dev for LZ4 compression.
+ * debian/rules:
+ - Update list of distributed files to back up and restore.
+ - Ensure version.c gets the right upstream or Debian version string.
+ - Allow build rules to work on a git snapshot tree.
+ * debian/copyright: Refresh for new upstream release.
+ * Bump Standards-Version to 3.9.6. No changes needed.
+
+ -- Mike Miller <mtmiller@debian.org> Sun, 05 Apr 2015 23:12:29 -0400
+
+openconnect (6.00-2) unstable; urgency=medium
+
+ * 01_fix-double-free.patch: Fix double free when PKCS#11 token does
+ not include CA certs. (Closes: #781240) Thanks to Laurent Bigonville.
+
+ -- Mike Miller <mtmiller@debian.org> Thu, 26 Mar 2015 08:34:14 -0400
+
+openconnect (6.00-1) unstable; urgency=medium
+
+ * New upstream release, upload to unstable.
+ - Fix regression breaking PKCS#11 token support. (Closes: #744214,
+ LP: #1308054)
+ * doc-remove-footer.patch: Remove, applied upstream.
+ * Update libopenconnect3 shlibs and symbols files.
+
+ -- Mike Miller <mtmiller@debian.org> Tue, 08 Jul 2014 22:33:31 -0400
+
+openconnect (5.99-2) experimental; urgency=medium
+
+ * Build against GnuTLS 3.x, drop OpenSSL. (Closes: #742755)
+ - Add Build-Depends on libgnutls28-dev rather than libgnutls-dev.
+ - Drop Build-Depends on libssl-dev.
+ - Remove OpenSSL-specific private function from libopenconnect3.symbols.
+ - fix-gnutls-2.x-build.patch: Drop patch no longer needed when building
+ against GnuTLS 3.x.
+ * Add Depends on liboath-dev for libopenconnect-dev.
+ * Add Build-Depends on libstoken-dev for RSA software token support.
+ * Build openconnect-dbg and libopenconnect3-dbg debug symbol packages.
+ * debian/rules: Back up and restore upstream files touched by dh-autoreconf.
+ * debian/upstream/signing-key.asc: Store upstream PGP signing key in
+ ASCII-armored format.
+ * Run wrap-and-sort on debian/control and debian/*.install.
+
+ -- Mike Miller <mtmiller@debian.org> Thu, 03 Apr 2014 09:14:07 -0400
+
+openconnect (5.99-1) experimental; urgency=medium
+
+ * New upstream release.
+ * Bump libopenconnect soname (2 -> 3) and update symbols file.
+ * doc-remove-footer.patch: Refresh patch from upstream git commit.
+ * fix-gnutls-2.x-build.patch: Cherry-pick from upstream git to fix building
+ against GnuTLS 2.x.
+ * debian/copyright: Refresh for new upstream release.
+
+ -- Mike Miller <mtmiller@debian.org> Thu, 06 Mar 2014 22:50:40 -0500
+
+openconnect (5.03-1) unstable; urgency=medium
+
+ * New upstream release.
+
+ -- Mike Miller <mtmiller@debian.org> Tue, 11 Feb 2014 22:43:03 -0500
+
+openconnect (5.02-1) unstable; urgency=medium
+
+ * New upstream release.
+ - Temporarily disable XML POST if an authgroup dropdown exists.
+ (LP: #1229195)
+ * doc-remove-footer.patch: Remove footer from HTML doc template, it
+ links to images from www.w3.org.
+ * debian/control: Use lowercase for package synopsis.
+ * debian/copyright: Fix some omissions in the copyright listing.
+ * debian/rules: No need to explicitly set CFLAGS/CPPFLAGS/LDFLAGS.
+ * debian/watch: Add support for verification of PGP signature on
+ upstream release.
+ * Use my @debian.org address.
+ * Bump Standards-Version to 3.9.5. No changes needed.
+
+ -- Mike Miller <mtmiller@debian.org> Sun, 12 Jan 2014 15:30:14 -0500
+
+openconnect (5.01-1) unstable; urgency=low
+
+ * New upstream release.
+ - Fix abuse of realloc() causing memory leaks. (Closes: #700805)
+ - Fix compatibility with certain connection forms. (Closes: #708207)
+ - Improve error handling when server closes connection. (Closes: #708928)
+ * Update shlibs and symbols files for libopenconnect2.
+ * debian/rules: Do not check for broken DTLS in OpenSSL, it has been
+ patched in the Debian openssl package.
+ * Add Build-Depends on liboath-dev.
+ * Add missing explicit dependency on zlib1g-dev
+ - Add Build-Depends on zlib1g-dev.
+ - Add Depends on zlib1g-dev to libopenconnect-dev.
+
+ -- Mike Miller <mtmiller@ieee.org> Sun, 02 Jun 2013 11:18:58 -0400
+
+openconnect (4.99-2) unstable; urgency=low
+
+ * Upload to unstable.
+
+ -- Mike Miller <mtmiller@ieee.org> Tue, 07 May 2013 19:46:22 -0400
+
+openconnect (4.99-1) experimental; urgency=low
+
+ * New upstream release (5.00 beta release).
+ * Update symbols file for libopenconnect2.
+ * Bump Standards-Version to 3.9.4. No changes needed.
+ * Remove obsolete DM-Upload-Allowed control field.
+ * Canonicalize Vcs-* control fields.
+
+ -- Mike Miller <mtmiller@ieee.org> Fri, 15 Feb 2013 09:14:15 -0500
+
+openconnect (4.07-1) experimental; urgency=low
+
+ * New upstream release.
+
+ -- Mike Miller <mtmiller@ieee.org> Sat, 01 Sep 2012 10:07:59 -0400
+
+openconnect (4.06-1) experimental; urgency=low
+
+ * New upstream release.
+ * debian/patches/01-Check-for-system-CA-certificate-file-for-GnuTLS.patch:
+ Remove, applied upstream.
+
+ -- Mike Miller <mtmiller@ieee.org> Mon, 23 Jul 2012 23:30:35 -0400
+
+openconnect (4.05-1) experimental; urgency=low
+
+ * New upstream release.
+ * Use dh-autoreconf to regenerate the build system.
+ * debian/patches/01-Check-for-system-CA-certificate-file-for-GnuTLS.patch:
+ Cherry-pick from upstream to allow configuring the default CA certificate
+ path.
+ * Configure with the path to the ca-certificates bundle.
+ * Add Recommends: ca-certificates to libopenconnect2 to use its provided
+ certificates by default.
+ * Build-depend on groff for building HTML docs.
+
+ -- Mike Miller <mtmiller@ieee.org> Sat, 21 Jul 2012 15:29:27 -0400
+
+openconnect (4.04-1~exp1) experimental; urgency=low
+
+ * New upstream release. (Closes: #677939)
+ * Remove 01_man-vpnc-script-path.patch, applied upstream.
+ * Bump libopenconnect soname (1 -> 2) and update symbols file.
+ * Build against GnuTLS.
+ - Build-depend on libgnutls-dev (>= 2.12.16).
+ - Build-depend on libp11-kit-dev.
+ - Still build-depend on libssl-dev for openconnect executable only.
+ * Enable verbose build (V=1) for more useful build logs.
+ * Bump debhelper compatibility to version 9.
+ * Set Multi-Arch: same and update library install paths for multiarch.
+
+ -- Mike Miller <mtmiller@ieee.org> Tue, 10 Jul 2012 23:21:17 -0400
+
+openconnect (3.20-4) unstable; urgency=low
+
+ * debian/patches/03_fix-abuse-of-realloc.patch: Backport patch from upstream
+ to fix possible memory leaks on realloc. (Closes: #700805)
+
+ -- Mike Miller <mtmiller@ieee.org> Thu, 28 Feb 2013 23:42:31 -0500
+
+openconnect (3.20-3) unstable; urgency=low
+
+ * debian/patches/02_CVE-2012-6128.patch: Backport patch from upstream to fix
+ buffer overflow (CVE-2012-6128). (Closes: #700794)
+
+ -- Mike Miller <mtmiller@ieee.org> Sun, 17 Feb 2013 11:56:35 -0500
+
+openconnect (3.20-2) unstable; urgency=low
+
+ * Depend on vpnc-scripts for routing and DNS configuration. (Closes:
+ #566193)
+ * Add 01_man-vpnc-script-path.patch to fix man page to match the
+ default vpnc-script path in Debian.
+ * Add DM-Upload-Allowed flag.
+
+ -- Mike Miller <mtmiller@ieee.org> Wed, 06 Jun 2012 08:45:27 -0400
+
+openconnect (3.20-1) unstable; urgency=low
+
+ * New upstream release.
+ * Update debian/copyright for 2012.
+ * Update libopenconnect1.symbols for versioned shared library ABI.
+
+ -- Mike Miller <mtmiller@ieee.org> Thu, 17 May 2012 22:06:31 -0400
+
+openconnect (3.18-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Mike Miller <mtmiller@ieee.org> Wed, 02 May 2012 21:02:47 -0400
+
+openconnect (3.17-1) unstable; urgency=low
+
+ * New upstream release
+ - Simplify install path for HTML docs
+ - Add required configuration path to vpnc script
+ * Use dpkg-buildflags for compiler options, support hardened build
+ * Add Vcs-* fields for the git repository
+
+ -- Mike Miller <mtmiller@ieee.org> Sat, 21 Apr 2012 08:48:41 -0400
+
+openconnect (3.16-1) unstable; urgency=low
+
+ * New upstream release
+ - Fix FTBFS on kfreebsd and hurd (Closes: #667996)
+ * Build and install HTML docs, copy the upstream changelog
+ * Fix Homepage address
+ * Remove debian/TODO, contents all done
+
+ -- Mike Miller <mtmiller@ieee.org> Mon, 09 Apr 2012 21:27:54 -0400
+
+openconnect (3.15-2) unstable; urgency=low
+
+ * Fix minimum version for shared library symbol
+
+ -- Mike Miller <mtmiller@ieee.org> Sat, 31 Mar 2012 09:38:14 -0400
+
+openconnect (3.15-1) unstable; urgency=low
+
+ * New maintainer
+ * New upstream release (Closes: #619967, #637362)
+ - Package new shared library, remove static library
+ - Remove fix-link.patch, already in 3.15
+ * Update description from upstream homepage (Closes: #521831)
+ * Update debian/copyright to machine-readable format 1.0
+ * Clean up package dependencies
+ - Add deps on libssl-dev and libxml2-dev for -dev package
+ - Add libproxy to build-deps and library deps
+ * Bump Standards-Version to 3.9.3
+
+ -- Mike Miller <mtmiller@ieee.org> Wed, 28 Mar 2012 22:49:19 -0400
+
+openconnect (3.02-2) unstable; urgency=low
+
+ * Upload to unstable.
+
+ -- Ross Burton <ross@debian.org> Wed, 11 May 2011 11:55:34 +0100
+
+openconnect (3.02-1) experimental; urgency=low
+
+ * New upstream release
+ * Add patch from upstream to fix linking on Debian
+
+ -- Ross Burton <ross@debian.org> Wed, 11 May 2011 11:55:34 +0100
+
+openconnect (2.25-0.1+squeeze2) stable-security; urgency=high
+
+ * debian/patches/02_CVE-2012-6128.patch: Backport patch from upstream to fix
+ buffer overflow (CVE-2012-6128).
+
+ -- Mike Miller <mtmiller@ieee.org> Wed, 13 Feb 2013 19:55:03 -0500
+
+openconnect (2.25-0.1+squeeze1) stable-security; urgency=high
+
+ * Apply patch from upstream to fix buffer overflow (CVE-2012-3291)
+
+ -- Mike Miller <mtmiller@ieee.org> Thu, 14 Jun 2012 02:56:51 -0400
+
+openconnect (2.25-0.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * New upstream release (Closes: #566188)
+ - always verify SSL server certificates (Closes: #590873)
+
+ -- Dominic Hargreaves <dom@earth.li> Sat, 28 Aug 2010 11:21:16 +0100
+
+openconnect (2.22-1.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Fix kFreeBSD detection (Closes: #577004) using patch from Petr Salinger
+
+ -- Christoph Egger <christoph@debian.org> Sat, 17 Jul 2010 16:06:33 -0400
+
+openconnect (2.22-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- Rob Bradford <robster@debian.org> Thu, 25 Mar 2010 16:11:35 +0000
+
+openconnect (2.01-1) unstable; urgency=low
+
+ * New upstream release.
+
+ -- Ross Burton <ross@debian.org> Wed, 24 Jun 2009 19:17:44 +0100
+
+openconnect (2.00-1) unstable; urgency=low
+
+ * New upstream release.
+ * Add fixes from upstream up to rev d45d92
+
+ -- Ross Burton <ross@debian.org> Tue, 16 Jun 2009 15:32:46 +0100
+
+openconnect (1.40-1) unstable; urgency=low
+
+ * New upstream release.
+
+ -- Ross Burton <ross@debian.org> Wed, 27 May 2009 15:50:36 +0100
+
+openconnect (1.00-1) unstable; urgency=low
+
+ * New upstream release
+ - Remove leak.patch
+ * Reword the description
+
+ -- Ross Burton <ross@debian.org> Wed, 18 Mar 2009 10:45:13 +0000
+
+openconnect (0.99-2) unstable; urgency=low
+
+ * Add patch from upstream to fix chronic memory leak.
+
+ -- Ross Burton <ross@debian.org> Fri, 06 Feb 2009 15:50:54 +0000
+
+openconnect (0.99-1) unstable; urgency=low
+
+ * New upstream release.
+ * Update copyright information
+ * Add watch file
+ * Add Homepage field
+
+ -- Ross Burton <ross@debian.org> Thu, 15 Jan 2009 13:26:25 +0000
+
+openconnect (0.98-3) unstable; urgency=low
+
+ * Bump Standards
+ * Add misc:Depends
+ * Remove vpnc wrapper and depends
+
+ -- Ross Burton <ross@debian.org> Wed, 14 Jan 2009 12:21:50 +0000
+
+openconnect (0.98-2) unstable; urgency=low
+
+ * Disable the GTK+ UI, so that Network Manager support works.
+
+ -- Ross Burton <ross@debian.org> Wed, 14 Jan 2009 11:22:20 +0000
+
+openconnect (0.98-1) unstable; urgency=low
+
+ * New upstream release.
+ * Add more netmasks (thanks Shane Bryan)
+
+ -- Ross Burton <ross@debian.org> Sat, 15 Nov 2008 11:55:18 +0000
+
+openconnect (0.96-1) unstable; urgency=low
+
+ * New upstream release.
+ * Enable the GTK+ passcode dialog
+
+ -- Ross Burton <ross@debian.org> Tue, 28 Oct 2008 09:29:21 +0000
+
+openconnect (0.95.1-2) unstable; urgency=low
+
+ * Install the NM helper into the correct location.
+
+ -- Ross Burton <ross@debian.org> Fri, 24 Oct 2008 16:15:20 +0100
+
+openconnect (0.95.1-1) unstable; urgency=low
+
+ * Initial packaging.
+
+ -- Ross Burton <ross@debian.org> Thu, 23 Oct 2008 12:01:37 +0100
--- /dev/null
+Source: openconnect
+Maintainer: David Woodhouse <dwmw2@infradead.org>
+Section: net
+Priority: optional
+Build-Depends: debhelper (>= 9),
+ dpkg-dev (>= 1.17.14),
+ groff,
+ libgcrypt20-dev,
+ libgnutls28-dev,
+ libkrb5-dev,
+ liblz4-dev,
+ libp11-kit-dev,
+ libpcsclite-dev,
+ libproxy-dev,
+ libsocket-wrapper [!hurd-i386] <!nocheck>,
+ libstoken-dev,
+ libtasn1-6-dev,
+ libuid-wrapper [!alpha !hurd-i386 !kfreebsd-amd64 !kfreebsd-i386] <!nocheck>,
+ libxml2-dev,
+ locales-all <!nocheck>,
+ ocserv [!hurd-i386 !kfreebsd-amd64 !kfreebsd-i386] <!nocheck>,
+ openssl <!nocheck>,
+ pkg-config,
+ python3,
+ softhsm2 [!hurd-i386] <!nocheck>,
+ zlib1g-dev
+Standards-Version: 4.5.0
+Rules-Requires-Root: no
+Vcs-Browser: https://salsa.debian.org/debian/openconnect
+Vcs-Git: https://salsa.debian.org/debian/openconnect.git
+Homepage: https://www.infradead.org/openconnect/
+
+Package: openconnect
+Architecture: any
+Depends: vpnc-scripts, ${misc:Depends}, ${shlibs:Depends}
+Description: open client for Cisco AnyConnect, Pulse, GlobalProtect VPN
+ OpenConnect is an SSL VPN client initially created to support Cisco's
+ AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
+ Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and
+ the Palo Alto Networks GlobalProtect SSL VPN.
+ .
+ A corresponding OpenConnect VPN server implementation can be found in the
+ ocserv package.
+
+Package: libopenconnect-dev
+Architecture: any
+Multi-Arch: same
+Section: libdevel
+Depends: libgnutls28-dev,
+ liblz4-dev,
+ libopenconnect5 (= ${binary:Version}),
+ libp11-kit-dev,
+ libpcsclite-dev,
+ libproxy-dev,
+ libstoken-dev,
+ libxml2-dev,
+ zlib1g-dev,
+ ${misc:Depends}
+Description: open client for Cisco AnyConnect, Pulse, GlobalProtect VPN - development files
+ OpenConnect is an SSL VPN client initially created to support Cisco's
+ AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
+ Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and
+ the Palo Alto Networks GlobalProtect SSL VPN.
+ .
+ This package provides the header and development files.
+
+Package: libopenconnect5
+Architecture: any
+Multi-Arch: same
+Section: libs
+Depends: ${misc:Depends}, ${shlibs:Depends}
+Recommends: ca-certificates
+Pre-Depends: ${misc:Pre-Depends}
+Description: open client for Cisco AnyConnect, Pulse, GlobalProtect VPN - shared library
+ OpenConnect is an SSL VPN client initially created to support Cisco's
+ AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
+ Secure VPN (formerly known as Juniper Network Connect or Junos Pulse) and
+ the Palo Alto Networks GlobalProtect SSL VPN.
+ .
+ This package provides the shared library.
--- /dev/null
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: OpenConnect
+Upstream-Contact: David Woodhouse <David.Woodhouse@intel.com>
+Source: ftp://ftp.infradead.org/pub/openconnect/
+
+Files: *
+Copyright: 2008-2016 Intel Corporation.
+ 2006 Reimar Doeffinger
+ 2008 Nick Andrew <nick@nick-andrew.net>
+ 2012-2014 Kevin Cernekee <cernekee@gmail.com>
+ 2013-2016 Nikos Mavrogiannopoulos
+ 2013 John Morrissey <jwm@horde.net>
+ 2016 Red Hat, Inc.
+ 2016-2018 Daniel Lenski <dlenski@gmail.com>
+ 2017-2018 James Bottomley <James.Bottomley@hansenpartnership.com>
+ 2018 David Woodhouse <dwmw2@infradead.org>
+License: LGPL-2.1
+
+Files: compat.c
+Copyright: 2007, 2010, Nathan C. Myers <ncm@cantrip.org>
+License: BSD-3-clause
+
+Files: gnutls_tpm2_esys.c
+Copyright: 2017-2018, Fraunhofer SIT sponsored by Infineon Technologies AG
+License: BSD-3-clause-Fraunhofer
+
+Files: android/run_pie.c
+Copyright: 2014 The Chromium Authors
+License: BSD-3-clause-Google
+
+Files: tests/dtls-psk
+ tests/ns.sh
+ tests/sigterm
+Copyright: 2018 Nikos Mavrogiannopoulos
+License: GPL-2+
+
+Files: www/html.py
+Copyright: 2005 Thomas Gleixner <tglx@linutronix.de>
+License: GPL-2
+
+Files: debian/*
+Copyright: 2012-2019 Mike Miller <mtmiller@debian.org>
+ 2008-2011 Ross Burton <ross@debian.org>
+License: GPL-2+
+
+License: GPL-2
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License version 2, as
+ published by the Free Software Foundation.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License along
+ with this program; if not, write to the Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+ .
+ On Debian systems, the complete text of the GNU General Public
+ License version 2 can be found in `/usr/share/common-licenses/GPL-2'.
+
+License: GPL-2+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2 of the License, or
+ (at your option) any later version.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License along
+ with this program; if not, write to the Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+ .
+ On Debian systems, the complete text of the GNU General Public
+ License version 2 can be found in `/usr/share/common-licenses/GPL-2'.
+
+License: LGPL-2.1
+ This library is free software; you can redistribute it and/or
+ modify it under the terms of the GNU Lesser General Public
+ License version 2.1, as published by the Free Software Foundation.
+ .
+ This library is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ Lesser General Public License for more details.
+ .
+ You should have received a copy of the GNU Lesser General Public
+ License along with this library; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ .
+ On Debian systems, the full text of the GNU Lesser General Public
+ License version 2.1 can be found in `/usr/share/common-licenses/LGPL-2.1'.
+
+License: BSD-3-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+ .
+ Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+ .
+ Redistributions in binary form must reproduce the above copyright notice,
+ this list of conditions and the following disclaimer in the documentation
+ and/or other materials provided with the distribution.
+ .
+ The name of the author must not be used to endorse or promote products
+ derived from this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+ LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-3-clause-Fraunhofer
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+ .
+ 1. Redistributions of source code must retain the above copyright notice,
+ this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright notice,
+ this list of conditions and the following disclaimer in the documentation
+ and/or other materials provided with the distribution.
+ .
+ 3. Neither the name of tpm2-tss-engine nor the names of its contributors
+ may be used to endorse or promote products derived from this software
+ without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+ LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
+ THE POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-3-clause-Google
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are
+ met:
+ .
+ * Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above
+ copyright notice, this list of conditions and the following disclaimer
+ in the documentation and/or other materials provided with the
+ distribution.
+ * Neither the name of Google Inc. nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--- /dev/null
+[DEFAULT]
+pristine-tar = True
--- /dev/null
+include:
+ - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
+ - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
+
+variables:
+ RELEASE: 'unstable'
--- /dev/null
+usr/include
+usr/lib/*/libopenconnect.so
+usr/lib/*/pkgconfig
--- /dev/null
+usr/lib/*/libopenconnect.so.*
--- /dev/null
+libopenconnect 5 libopenconnect5 (>= 8.01)
--- /dev/null
+libopenconnect.so.5 libopenconnect5 #MINVER#
+* Build-Depends-Package: libopenconnect-dev
+ OPENCONNECT_5.0@OPENCONNECT_5.0 7.00
+ OPENCONNECT_5_1@OPENCONNECT_5_1 7.05
+ OPENCONNECT_5_2@OPENCONNECT_5_2 7.05
+ OPENCONNECT_5_3@OPENCONNECT_5_3 7.07
+ OPENCONNECT_5_4@OPENCONNECT_5_4 7.08
+ OPENCONNECT_5_5@OPENCONNECT_5_5 8.01
+ OPENCONNECT_PRIVATE@OPENCONNECT_PRIVATE 6.00
+ openconnect_check_peer_cert_hash@OPENCONNECT_5.0 7.00
+ openconnect_clear_cookie@OPENCONNECT_5.0 7.00
+ openconnect_disable_ipv6@OPENCONNECT_5_3 7.07
+ openconnect_fopen_utf8@OPENCONNECT_PRIVATE 7.00
+ openconnect_free_cert_info@OPENCONNECT_5.0 7.00
+ openconnect_free_peer_cert_chain@OPENCONNECT_5_3 7.07
+ openconnect_free_supported_protocols@OPENCONNECT_5_5 8.01
+ openconnect_get_cookie@OPENCONNECT_5.0 7.00
+ openconnect_get_cstp_cipher@OPENCONNECT_5.0 7.00
+ openconnect_get_cstp_compression@OPENCONNECT_5_3 7.07
+ openconnect_get_dnsname@OPENCONNECT_5_3 7.07
+ openconnect_get_dtls_cipher@OPENCONNECT_5.0 7.00
+ openconnect_get_dtls_compression@OPENCONNECT_5_3 7.07
+ openconnect_get_hostname@OPENCONNECT_5.0 7.00
+ openconnect_get_idle_timeout@OPENCONNECT_5_5 8.01
+ openconnect_get_ifname@OPENCONNECT_5.0 7.00
+ openconnect_get_ip_info@OPENCONNECT_5.0 7.00
+ openconnect_get_peer_cert_DER@OPENCONNECT_5.0 7.00
+ openconnect_get_peer_cert_chain@OPENCONNECT_5_3 7.07
+ openconnect_get_peer_cert_details@OPENCONNECT_5.0 7.00
+ openconnect_get_peer_cert_hash@OPENCONNECT_5.0 7.00
+ openconnect_get_port@OPENCONNECT_5.0 7.00
+ openconnect_get_protocol@OPENCONNECT_5_5 8.01
+ openconnect_get_supported_protocols@OPENCONNECT_5_5 8.01
+ openconnect_get_urlpath@OPENCONNECT_5.0 7.00
+ openconnect_get_version@OPENCONNECT_5.0 7.00
+ openconnect_has_oath_support@OPENCONNECT_5.0 7.00
+ openconnect_has_pkcs11_support@OPENCONNECT_5.0 7.00
+ openconnect_has_stoken_support@OPENCONNECT_5.0 7.00
+ openconnect_has_system_key_support@OPENCONNECT_5.0 7.00
+ openconnect_has_tss2_blob_support@OPENCONNECT_5_5 8.01
+ openconnect_has_tss_blob_support@OPENCONNECT_5.0 7.00
+ openconnect_has_yubioath_support@OPENCONNECT_5.0 7.00
+ openconnect_init_ssl@OPENCONNECT_5.0 7.00
+ openconnect_mainloop@OPENCONNECT_5.0 7.00
+ openconnect_make_cstp_connection@OPENCONNECT_5.0 7.00
+ openconnect_obtain_cookie@OPENCONNECT_5.0 7.00
+ openconnect_open_utf8@OPENCONNECT_PRIVATE 7.00
+ openconnect_override_getaddrinfo@OPENCONNECT_5_3 7.07
+ openconnect_parse_url@OPENCONNECT_5.0 7.00
+ openconnect_passphrase_from_fsid@OPENCONNECT_5.0 7.00
+ openconnect_reset_ssl@OPENCONNECT_5.0 7.00
+ openconnect_set_cafile@OPENCONNECT_5.0 7.00
+ openconnect_set_cancel_fd@OPENCONNECT_5.0 7.00
+ openconnect_set_cert_expiry_warning@OPENCONNECT_5.0 7.00
+ openconnect_set_client_cert@OPENCONNECT_5.0 7.00
+ openconnect_set_compression_mode@OPENCONNECT_5_1 7.05
+ openconnect_set_csd_environ@OPENCONNECT_5.0 7.00
+ openconnect_set_dpd@OPENCONNECT_5.0 7.00
+ openconnect_set_hostname@OPENCONNECT_5.0 7.00
+ openconnect_set_http_auth@OPENCONNECT_5_2 7.05
+ openconnect_set_http_proxy@OPENCONNECT_5.0 7.00
+ openconnect_set_key_password@OPENCONNECT_5_5 8.01
+ openconnect_set_localname@OPENCONNECT_5_3 7.07
+ openconnect_set_loglevel@OPENCONNECT_5_1 7.05
+ openconnect_set_mobile_info@OPENCONNECT_5.0 7.00
+ openconnect_set_option_value@OPENCONNECT_5.0 7.00
+ openconnect_set_pass_tos@OPENCONNECT_5_4 7.08
+ openconnect_set_pfs@OPENCONNECT_5.0 7.00
+ openconnect_set_protect_socket_handler@OPENCONNECT_5.0 7.00
+ openconnect_set_protocol@OPENCONNECT_5_2 7.05
+ openconnect_set_proxy_auth@OPENCONNECT_5.0 7.00
+ openconnect_set_reconnected_handler@OPENCONNECT_5_3 7.07
+ openconnect_set_reported_os@OPENCONNECT_5.0 7.00
+ openconnect_set_reqmtu@OPENCONNECT_5.0 7.00
+ openconnect_set_setup_tun_handler@OPENCONNECT_5.0 7.07
+ openconnect_set_stats_handler@OPENCONNECT_5.0 7.00
+ openconnect_set_stoken_mode@OPENCONNECT_5.0 7.00
+ openconnect_set_system_trust@OPENCONNECT_5.0 7.00
+ openconnect_set_token_callbacks@OPENCONNECT_5.0 7.00
+ openconnect_set_token_mode@OPENCONNECT_5.0 7.00
+ openconnect_set_urlpath@OPENCONNECT_5.0 7.00
+ openconnect_set_version_string@OPENCONNECT_5_5 8.01
+ openconnect_set_xmlpost@OPENCONNECT_5.0 7.00
+ openconnect_set_xmlsha1@OPENCONNECT_5.0 7.00
+ openconnect_setup_cmd_pipe@OPENCONNECT_5.0 7.00
+ openconnect_setup_csd@OPENCONNECT_5.0 7.00
+ openconnect_setup_dtls@OPENCONNECT_5.0 7.00
+ openconnect_setup_tun_device@OPENCONNECT_5.0 7.00
+ openconnect_setup_tun_fd@OPENCONNECT_5.0 7.00
+ openconnect_setup_tun_script@OPENCONNECT_5.0 7.00
+ openconnect_sha1@OPENCONNECT_PRIVATE 6.00
+ openconnect_version_str@OPENCONNECT_PRIVATE 6.00
+ openconnect_vpninfo_free@OPENCONNECT_5.0 7.00
+ openconnect_vpninfo_new@OPENCONNECT_5.0 7.00
--- /dev/null
+usr/lib/*/libopenconnect.la
--- /dev/null
+openconnect (3.20-2) unstable; urgency=low
+
+ OpenConnect is now configured to use the script provided by the vpnc-scripts
+ package by default. If you were downloading this script as suggested by the
+ OpenConnect documentation, you can now use it as shipped in Debian without
+ any custom configuration.
+
+ -- Mike Miller <mtmiller@ieee.org> Wed, 06 Jun 2012 08:45:27 -0400
--- /dev/null
+Document: openconnect
+Title: OpenConnect VPN Client
+Author: David Woodhouse
+Abstract: User and developer documentation for the OpenConnect VPN client.
+Section: Network/Communication
+
+Format: HTML
+Index: /usr/share/doc/openconnect/html/index.html
+Files: /usr/share/doc/openconnect/html/*.html
--- /dev/null
+usr/lib/*-*/openconnect/*.sh
+usr/sbin
+usr/share/doc/openconnect/html
+usr/share/locale
+usr/share/man
--- /dev/null
+# This script is intended to be ran on Android distributions.
+openconnect: wrong-path-for-interpreter usr/libexec/openconnect/hipreport-android.sh (#!/system/bin/sh != /bin/sh)
--- /dev/null
+#!/usr/bin/make -f
+
+include /usr/share/dpkg/pkg-info.mk
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+# Link with --as-needed to eliminate unused or indirect library dependencies
+export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+
+%:
+ dh $@
+
+override_dh_auto_configure:
+ dh_auto_configure -- \
+ --disable-dsa-tests \
+ --htmldir=/usr/share/doc/openconnect/html \
+ --with-gnutls \
+ --with-vpnc-script=/usr/share/vpnc-scripts/vpnc-script
+ $(MAKE) version.c
+ sed -i -e 's|".*"|"v$(DEB_VERSION)"|' version.c
+
+override_dh_installchangelogs:
+ dh_installchangelogs www/changelog.html
+
+override_dh_compress:
+ dh_compress -Xhtml/changelog.html
+
+override_dh_autoreconf:
+ dh_autoreconf --as-needed
--- /dev/null
+Tests: upstream-test-suite
+Depends: @,
+ libsocket-wrapper,
+ libuid-wrapper,
+ locales-all,
+ ocserv (>= 0.12.1-2),
+ softhsm2
--- /dev/null
+#!/bin/sh
+#
+# upstream-test-suite - Run the upstream test suite on the installed binary
+# Copyright (C) 2019 Mike Miller
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License along
+# with this program; if not, write to the Free Software Foundation, Inc.,
+# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+# This is the installed path to OpenConnect to be tested
+export OPENCONNECT=/usr/sbin/openconnect
+
+# Make a copy of the tests directory from the source package
+topdir=$AUTOPKGTEST_TMP
+testdir=$topdir/tests
+mkdir -p $testdir
+cp -a tests/* $testdir
+cd $testdir
+
+# Save test script output in the autopkgtest artifact directory
+logdir=$AUTOPKGTEST_ARTIFACTS/log
+mkdir -p $logdir
+
+# Emulate running configure substitutions on .in files needed by tests
+for fn in configs/test-user-cert.config configs/test-user-pass.config softhsm2.conf; do
+ sed -e 's|@abs_top_srcdir@|'$topdir'|g' \
+ -e 's|@top_srcdir@|'$topdir'|g' \
+ -e 's|@OCSERV_USER@|'$(id -un)'|g' \
+ -e 's|@OCSERV_GROUP@|'$(id -gn)'|g' \
+ $fn.in > $fn
+done
+
+ec_keys=$(ls certs/ec-key-*)
+user_keys=$(ls certs/user-key-* | grep -Ev 'pbes2-sha256|md5-des|nonascii')
+
+# Replicate the environment expected by the test scripts in 'make check'
+export key_list="$user_keys $ec_keys"
+export pkcs11_keys="object=RSA id=%01 object=EC id=%03"
+export pkcs11_tokens="openconnect-test openconnect-test1 openconnect-test2"
+
+# Run the test scripts in sequence, exiting at the end if any fail
+status=0
+for s in auth-certificate auth-nonascii auth-pkcs11 auth-username-pass id-test; do
+ sh $s > $logdir/$s.log 2>&1
+ if [ $? -eq 0 ]; then
+ echo "PASS: $s"
+ else
+ echo "FAIL: $s"
+ status=1
+ fi
+done
+
+exit $status
--- /dev/null
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=q6KQ
+-----END PGP PUBLIC KEY BLOCK-----
--- /dev/null
+version=4
+opts=pgpsigurlmangle=s/$/.asc/ \
+ftp://ftp.infradead.org/pub/openconnect/openconnect-(.*)\.tar\.gz