From: Daniel Lenski <dlenski@gmail.com>
Date: Wed, 21 Apr 2021 04:34:22 +0000 (-0700)
Subject: Warn if <quarantine> is set in GlobalProtect XML config
X-Git-Tag: v8.20~262
X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=958da82445d99043aa9439ce578f158dea6e463c;p=users%2Fdwmw2%2Fopenconnect.git

Warn if <quarantine> is set in GlobalProtect XML config

Signed-off-by: Daniel Lenski <dlenski@gmail.com>
---

diff --git a/gpst.c b/gpst.c
index 29054749..39b6daa3 100644
--- a/gpst.c
+++ b/gpst.c
@@ -383,6 +383,10 @@ static int gpst_parse_config_xml(struct openconnect_info *vpninfo, xmlNode *xml_
 			vpninfo->ip_info.mtu = atoi(s);
 		else if (!xmlnode_get_val(xml_node, "lifetime", &s))
 			vpninfo->auth_expiration = time(NULL) + atol(s);
+		else if (!xmlnode_get_val(xml_node, "quarantine", &s) && strcmp(s, "no"))
+			vpn_progress(vpninfo, PRG_DEBUG,
+				     _("WARNING: Config XML contains <quarantine> tag with value of \"%s\".\n"
+				       "    VPN connectivity may be disabled or limited.\n"), s);
 		else if (!xmlnode_get_val(xml_node, "disconnect-on-idle", &s)) {
 			int sec = atoi(s);
 			vpn_progress(vpninfo, PRG_INFO, _("Idle timeout is %d minutes.\n"), sec/60);