From 0cb55e2eec114f93a905b4df61775c472caeee95 Mon Sep 17 00:00:00 2001 From: David Woodhouse Date: Tue, 15 Jun 2021 09:49:22 +0100 Subject: [PATCH] Use https://www.infradead.org/openconnect/download/ URLs FTP is getting harder to access these days. Signed-off-by: David Woodhouse --- Makefile.am | 8 +- mingw-openconnect.spec.in | 6 +- openconnect.spec.in | 6 +- www/changelog.xml | 226 +++++++++++++++++++------------------- www/download.xml | 6 +- 5 files changed, 126 insertions(+), 126 deletions(-) diff --git a/Makefile.am b/Makefile.am index 2b9dd139..6078420a 100644 --- a/Makefile.am +++ b/Makefile.am @@ -219,8 +219,8 @@ tag: uncommitted-check @( echo '1,//p' ;\ echo '//,$$p' ;\ echo '//a\' ;\ - echo 'The latest release is OpenConnect v$(VERSION)\' ;\ - echo '(PGP signature),\' ;\ + echo 'The latest release is OpenConnect v$(VERSION)\' ;\ + echo '(PGP signature),\' ;\ echo 'released on $(shell date +%Y-%m-%d) with the following changelog:

\' ;\ sed '0,/OpenConnect HEAD/d;/<\/ul>/,$$d;s/$$/\\/' $(srcdir)/www/changelog.xml ;\ echo ' ' ) | \ @@ -230,8 +230,8 @@ tag: uncommitted-check echo '
    \' ;\ echo '
  • No changelog entries yet
    • \';\ echo '

\' ; echo ' \' ;\ - echo '
  • OpenConnect v$(VERSION)\' ;\ - echo ' (PGP signature) — $(shell date +%Y-%m-%d)' ) | \ + echo '
  • OpenConnect v$(VERSION)\' ;\ + echo ' (PGP signature) — $(shell date +%Y-%m-%d)' ) | \ sed -f - -i $(srcdir)/www/changelog.xml @echo '/API version [0-9]\+\.[0-9]\+:$$/s/:/ (v$(VERSION); $(shell date +%Y-%m-%d)):/' | \ sed -f - -i $(srcdir)/openconnect.h diff --git a/mingw-openconnect.spec.in b/mingw-openconnect.spec.in index e579b9b1..c121ab0b 100644 --- a/mingw-openconnect.spec.in +++ b/mingw-openconnect.spec.in @@ -13,14 +13,14 @@ Name: mingw-openconnect Version: %{tagver}%{?snapver} Release: 0%{?dist} -Summary: Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect +Summary: Open client for SSL VPNs including Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect, Fortinet, etc. License: LGPLv2 -URL: http://www.infradead.org/openconnect.html +URL: https://www.infradead.org/openconnect.html %if 0%{?gitsnapshot} Source0: https://github.com/openconnect/%{name}/archive/%{snapcommit}/openconnect-%{shortcommit}.tar.gz %else -Source0: ftp://ftp.infradead.org/pub/%{name}/openconnect-%{version}.tar.gz +Source0: https://www.infradead.org/openconnect/download/openconnect-%{version}.tar.gz %endif Source2: gpgkey-BE07D9FD54809AB2C4B0FF5F63762CDA67E2F359.asc Source3: macros.gpg diff --git a/openconnect.spec.in b/openconnect.spec.in index e46c980d..fc009805 100644 --- a/openconnect.spec.in +++ b/openconnect.spec.in @@ -33,14 +33,14 @@ Name: openconnect Version: %{tagver}%{?snapver} Release: 0%{?dist} -Summary: Open client for Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect +Summary: Open client for SSL VPNs including Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect, Fortinet, etc. License: LGPLv2 -URL: http://www.infradead.org/openconnect.html +URL: https://www.infradead.org/openconnect.html %if 0%{?gitsnapshot} Source0: https://github.com/openconnect/%{name}/archive/%{snapcommit}/%{name}-%{shortcommit}.tar.gz %else -Source0: ftp://ftp.infradead.org/pub/%{name}/%{name}-%{version}.tar.gz +Source0: https://www.infradead.org/openconnect/download/%{name}-%{version}.tar.gz %endif Source2: gpgkey-BE07D9FD54809AB2C4B0FF5F63762CDA67E2F359.asc Source3: macros.gpg diff --git a/www/changelog.xml b/www/changelog.xml index 03e1025e..c94fb94a 100644 --- a/www/changelog.xml +++ b/www/changelog.xml @@ -47,8 +47,8 @@
  • Disable brittle "system policy" enforcement where it cannot be gracefully overridden at user request. (RH#1960763).

    • -
  • OpenConnect v8.10 - (PGP signature) — 2020-05-14 +
  • OpenConnect v8.10 + (PGP signature) — 2020-05-14
    • Install bash completion script to ${datadir}/bash-completion/completions/openconnect.
    • Improve compatibility of csd-post.sh trojan.
      • @@ -56,8 +56,8 @@
    • Fix potential buffer overflow with GnuTLS describing local certs (CVE-2020-12823).

    • -
  • OpenConnect v8.09 - (PGP signature) — 2020-04-29 +
  • OpenConnect v8.09 + (PGP signature) — 2020-04-29
    • Add bash completion support.
    • Give more helpful error in case of Pulse servers asking for TNCC.
      • @@ -70,16 +70,16 @@
    • Work around PKCS#11 tokens which forget to set CKF_LOGIN_REQUIRED (#123).

    • -
  • OpenConnect v8.08 - (PGP signature) — 2020-04-06 +
  • OpenConnect v8.08 + (PGP signature) — 2020-04-06
    • Fix check of pin-sha256: public key hashes to be case sensitive (#116).
    • Don't give non-functioning stderr to CSD trojan scripts.
    • Fix crash with uninitialised OIDC token.

    • -
  • OpenConnect v8.07 - (PGP signature) — 2020-04-04 +
  • OpenConnect v8.07 + (PGP signature) — 2020-04-04
    • Don't abort Pulse connection when server-provided certificate MD5 doesn't match.
    • Fix off-by-one in check for bad GnuTLS versions, and add build and run time checks.
      • @@ -88,8 +88,8 @@
    • Convert tncc-wrapper.py to Python 3, and include modernized tncc-emulate.py as well.

    • -
  • OpenConnect v8.06 - (PGP signature) — 2020-03-31 +
  • OpenConnect v8.06 + (PGP signature) — 2020-03-31
    • Implement EAP-TTLS fragmentation.
    • Fix Windows build with MSYS2 (#74).
      • @@ -105,15 +105,15 @@
    • Add RFC6750 Bearer token support (!70).

    • -
  • OpenConnect v8.05 - (PGP signature) — 2019-09-12 +
  • OpenConnect v8.05 + (PGP signature) — 2019-09-12
    • Fix GlobalProtect ESP stall (!55).
    • Fix HTTP chunked encoding buffer overflow (CVE-2019-16239).

    • -
  • OpenConnect v8.04 - (PGP signature) — 2019-08-09 +
  • OpenConnect v8.04 + (PGP signature) — 2019-08-09
    • Rework DTLS MTU detection. (#10)
    • Add Pulse Connect Secure support.
      • @@ -124,8 +124,8 @@
    • Fix proxy username/password handling to allow special characters and escaping.

    • -
  • OpenConnect v8.03 - (PGP signature) — 2019-05-18 +
  • OpenConnect v8.03 + (PGP signature) — 2019-05-18
    • Fix detection of utun support on OS X (#18).
    • Fix Cisco DTLSv1.2 support for AES256-GCM-SHA384.
      • @@ -133,8 +133,8 @@
    • Fix recognition of OTP password fields (#24).

    • -
  • OpenConnect v8.02 - (PGP signature) — 2019-01-16 +
  • OpenConnect v8.02 + (PGP signature) — 2019-01-16
    • Fix GNU/Hurd build.
    • Discover vpnc-script in default packaged location on FreeBSD/OpenBSD.
      • @@ -145,15 +145,15 @@
    • Invoke script with reason=attempt-reconnect before doing so.

    • -
  • OpenConnect v8.01 - (PGP signature) — 2019-01-05 +
  • OpenConnect v8.01 + (PGP signature) — 2019-01-05
    • Fix memset_s() arguments.
    • Fix OpenBSD build.

    • -
  • OpenConnect v8.00 - (PGP signature) — 2019-01-05 +
  • OpenConnect v8.00 + (PGP signature) — 2019-01-05
    • Clear form submissions (which may include passwords) before freeing (CVE-2018-20319).
    • Allow form responses to be provided on command line.
      • @@ -173,8 +173,8 @@
    • SIGTERM cleans up the session similarly to SIGINT.

    • -
  • OpenConnect v7.08 - (PGP signature) — 2016-12-13 +
  • OpenConnect v7.08 + (PGP signature) — 2016-12-13
    • Add SHA256 support for server cert hashes.
    • Enable DHE ciphers for Cisco DTLS.
      • @@ -208,8 +208,8 @@
    • Support Juniper "Pre Sign-in Message".

    • -
  • OpenConnect v7.07 - (PGP signature) — 2016-07-11 +
  • OpenConnect v7.07 + (PGP signature) — 2016-07-11
    • More fixes for OpenSSL 1.1 build.
    • Support Juniper "Post Sign-in Message".
      • @@ -226,8 +226,8 @@
    • Add --resolve and --local-hostname options to command line.

    • -
  • OpenConnect v7.06 - (PGP signature) — 2015-03-17 +
  • OpenConnect v7.06 + (PGP signature) — 2015-03-17
    • Fix openconnect.pc breakage after liboath removal.
    • Refactor Juniper Network Connect receive loop.
      • @@ -235,8 +235,8 @@
    • Add Bosnian translation.

    • -
  • OpenConnect v7.05 - (PGP signature) — 2015-03-10 +
  • OpenConnect v7.05 + (PGP signature) — 2015-03-10
    • Fix alignment issue which broke LZS compression on ARM etc.
    • Support HTTP authentication to servers, not just proxies.
      • @@ -250,8 +250,8 @@
    • Preliminary support for Juniper SSL VPN.

    • -
  • OpenConnect v7.04 - (PGP signature) — 2015-01-25 +
  • OpenConnect v7.04 + (PGP signature) — 2015-01-25
    • Change default behaviour to enable only stateless compression.
    • Add --compression argument and openconnect_set_compression_mode().
      • @@ -259,8 +259,8 @@
    • Add support for LZ4 compression (compatible with ocserv).

    • -
  • OpenConnect v7.03 - (PGP signature) — 2015-01-09 +
  • OpenConnect v7.03 + (PGP signature) — 2015-01-09
    • Android build infrastructure updates, including 64-bit support.
    • Clean up handling of incoming packets.
      • @@ -268,15 +268,15 @@
    • Stop using static variables for received packets.

    • -
  • OpenConnect v7.02 - (PGP signature) — 2014-12-19 +
  • OpenConnect v7.02 + (PGP signature) — 2014-12-19
    • Add PKCS#11 support for OpenSSL.
    • Fix handling of select options in openconnect_set_option_value().

    • -
  • OpenConnect v7.01 - (PGP signature) — 2014-12-07 +
  • OpenConnect v7.01 + (PGP signature) — 2014-12-07
    • Try harder to find a PKCS#11 key to match a given certificate.
    • Handle 'Connection: close' from proxies correctly.
      • @@ -284,8 +284,8 @@
    • Add support for X-CSTP-DynDNS, to trigger DNS lookup on each reconnect.

    • -
  • OpenConnect v7.00 - (PGP signature) — 2014-11-27 +
  • OpenConnect v7.00 + (PGP signature) — 2014-11-27
    • Add support for GnuTLS 3.4 system: keys including Windows certificate store.
    • Add support for HOTP/TOTP keys from Yubikey NEO devices.
      • @@ -308,8 +308,8 @@
    • Fix crash on invocation with --token-mode but no --token-secret.

    • -
  • OpenConnect v6.00 - (PGP signature) — 2014-07-08 +
  • OpenConnect v6.00 + (PGP signature) — 2014-07-08
    • Support SOCKS proxy authentication (password, GSSAPI).
    • Support HTTP proxy authentication (Basic, Digest, NTLM and GSSAPI).
      • @@ -322,8 +322,8 @@
    • Update several Android dependencies, and make the download process more robust.

    • -
  • OpenConnect v5.99 - (PGP signature) — 2014-03-05 +
  • OpenConnect v5.99 + (PGP signature) — 2014-03-05
    • Add RFC4226 HOTP token support.
    • Tolerate servers closing connection uncleanly after HTTP/1.0 response (Ubuntu #1225276).
      • @@ -346,14 +346,14 @@ 3.2.9+.

    • -
  • OpenConnect v5.03 - (PGP signature) — 2014-02-03 +
  • OpenConnect v5.03 + (PGP signature) — 2014-02-03
    • Fix crash on --authenticate due to freeing --cafile option in argv.

    • -
  • OpenConnect v5.02 - (PGP signature) — 2014-01-01 +
  • OpenConnect v5.02 + (PGP signature) — 2014-01-01
    • Fix XML POST issues with authgroups by falling back to old style login.
    • Fix --cookie-on-stdin with cookies from ocserv.
      • @@ -365,8 +365,8 @@
    • Fix possible heap overflow if MTU is increased on reconnection (CVE-2013-7098).

    • -
  • OpenConnect v5.01 - (PGP signature) — 2013-06-01 +
  • OpenConnect v5.01 + (PGP signature) — 2013-06-01
    • Attempt to handle &lt;client-cert-request&gt; in aggregate auth mode.
    • Don't include X-Aggregate-Auth: header in fallback mode.
      • @@ -379,8 +379,8 @@
    • Improve error handling when server closes connection (Debian #708928).

    • -
  • OpenConnect v5.00 - (PGP signature) — 2013-05-15 +
  • OpenConnect v5.00 + (PGP signature) — 2013-05-15
    • Use GnuTLS by default instead of OpenSSL.
    • Avoid using deprecated gnutls_pubkey_verify_data() function.
      • @@ -391,16 +391,16 @@
    • Replace --stoken option with more generic --token-mode and --token-secret options.

    • -
  • OpenConnect v4.99 - (PGP signature) — 2013-02-07 +
  • OpenConnect v4.99 + (PGP signature) — 2013-02-07
    • Add --os switch to report a different OS type to the gateway.
    • Support new XML POST format.
    • Add SecurID token support using libstoken.

    • -
  • OpenConnect v4.08 - (PGP signature) — 2013-02-13 +
  • OpenConnect v4.08 + (PGP signature) — 2013-02-13
    • Fix overflow on HTTP request buffers (CVE-2012-6128)
    • Fix connection to servers with round-robin DNS with two-stage auth/connect.
      • @@ -409,23 +409,23 @@
    • Improve "Attempting to connect..." message to be explicit when it's connecting to a proxy.

    • -
  • OpenConnect v4.07 - (PGP signature) — 2012-08-31 +
  • OpenConnect v4.07 + (PGP signature) — 2012-08-31
    • Fix segmentation fault when invoked with -p argument.
    • Fix handling of write stalls on CSTP (TCP) socket.

    • -
  • OpenConnect v4.06 - (PGP signature) — 2012-07-23 +
  • OpenConnect v4.06 + (PGP signature) — 2012-07-23
    • Fix default CA location for non-Fedora systems with old GnuTLS.
    • Improve error handing when vpnc-script exits with error.
    • Handle PKCS#11 tokens which won't list keys without login.

    • -
  • OpenConnect v4.05 - (PGP signature) — 2012-07-12 +
  • OpenConnect v4.05 + (PGP signature) — 2012-07-12
    • Use correct CSD script for Mac OS X.
    • Fix endless loop in PIN cache handling with multiple PKCS#11 tokens.
      • @@ -434,14 +434,14 @@
    • Fix GnuTLS v3 build on OpenBSD.

    • -
  • OpenConnect v4.04 - (PGP signature) — 2012-07-05 +
  • OpenConnect v4.04 + (PGP signature) — 2012-07-05
    • Fix GnuTLS password handling for PKCS#8 files.

    • -
  • OpenConnect v4.03 - (PGP signature) — 2012-07-02 +
  • OpenConnect v4.03 + (PGP signature) — 2012-07-02
    • Fix --no-proxy option.
    • Fix handling of requested vs. received MTU settings.
      • @@ -450,14 +450,14 @@
    • Fix GnuTLS compatibilty issue with servers that insist on TLSv1.0 or non-AES ciphers (RH#836558).

    • -
  • OpenConnect v4.02 - (PGP signature) — 2012-06-28 +
  • OpenConnect v4.02 + (PGP signature) — 2012-06-28
    • Fix build failure due to unconditional inclusion of &lt;gnutls/dtls.h&gt;.

    • -
  • OpenConnect v4.01 - (PGP signature) — 2012-06-28 +
  • OpenConnect v4.01 + (PGP signature) — 2012-06-28
    • Fix DTLS MTU issue with GnuTLS.
    • Fix reconnect crash when compression is disabled.
      • @@ -467,8 +467,8 @@
    • Fix openconnect.pc pkg-config file not to require zlib.pc on systems which lack it (like RHEL5).

    • -
  • OpenConnect v4.00 - (PGP signature) — 2012-06-20 +
  • OpenConnect v4.00 + (PGP signature) — 2012-06-20
    • Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS.
    • Fix repeated passphrase retry for OpenSSL.
      • @@ -477,8 +477,8 @@
    • Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12.

    • -
  • OpenConnect v3.99 - (PGP signature) — 2012-06-13 +
  • OpenConnect v3.99 + (PGP signature) — 2012-06-13
    • Enable native TPM support when built with GnuTLS.
    • Enable PKCS#11 token support when built with GnuTLS.
      • @@ -489,15 +489,15 @@
    • Add --with-pkgconfigdir= option to configure for FreeBSD's benefit (fd#48743).

    • -
  • OpenConnect v3.20 - (PGP signature) — 2012-05-18 +
  • OpenConnect v3.20 + (PGP signature) — 2012-05-18
    • Cope with non-keepalive HTTP response on authentication success.
    • Fix progress callback with incorrect cbdata which caused KDE crash.

    • -
  • OpenConnect v3.19 - (PGP signature) — 2012-05-17 +
  • OpenConnect v3.19 + (PGP signature) — 2012-05-17
    • Add --config option for reading options from file.
    • Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04.
      • @@ -510,15 +510,15 @@
    • Fix --non-inter option so it still uses login information from command line.

    • -
  • OpenConnect v3.18 - (PGP signature) — 2012-04-25 +
  • OpenConnect v3.18 + (PGP signature) — 2012-04-25
    • Fix autohate breakage with --disable-nls... hopefully.
    • Fix buffer overflow in banner handling.

    • -
  • OpenConnect v3.17 - (PGP signature) — 2012-04-20 +
  • OpenConnect v3.17 + (PGP signature) — 2012-04-20
    • Work around time() brokenness on Solaris.
    • Fix interface plumbing on Solaris 10.
      • @@ -530,8 +530,8 @@
    • Invoke vpnc-script with "pre-init" reason to load tun module if necessary.

    • -
  • OpenConnect v3.16 - (PGP signature) — 2012-04-08 +
  • OpenConnect v3.16 + (PGP signature) — 2012-04-08
    • Fix build failure on Debian/kFreeBSD and Hurd.
    • Fix memory leak of deflated packets.
      • @@ -544,15 +544,15 @@
    • Be more conservative in detecting libproxy without pkg-config.

    • -
  • OpenConnect v3.15 - (PGP signature) — 2011-11-25 +
  • OpenConnect v3.15 + (PGP signature) — 2011-11-25
    • Fix for reading multiple packets from Solaris tun device.
    • Call bindtextdomain() to ensure that translations are found in install path.

    • -
  • OpenConnect v3.14 - (PGP signature) — 2011-11-08 +
  • OpenConnect v3.14 + (PGP signature) — 2011-11-08
    • Move executable to $prefix/sbin.
    • Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD &amp; NetBSD.
      • @@ -561,8 +561,8 @@
    • Attempt to make NLS support more portable (with fewer dependencies).

    • -
  • OpenConnect v3.13 - (PGP signature) — 2011-09-30 +
  • OpenConnect v3.13 + (PGP signature) — 2011-09-30
    • Add --cert-expire-warning option.
    • Give visible warning when server dislikes client SSL certificate.
      • @@ -573,7 +573,7 @@
    • Fix various minor compiler warnings.

    • -
  • OpenConnect v3.12 — 2011-09-12 +
  • OpenConnect v3.12 — 2011-09-12
    • Fix DTLS compatibility with ASA firmware 8.4.1(11) and above.
    • Fix build failures on GNU Hurd, on systems with ancient OpenSSL, @@ -582,7 +582,7 @@
    • Print SHA1 fingerprint with server certificate details.

    • -
  • OpenConnect v3.11 — 2011-07-20 +
  • OpenConnect v3.11 — 2011-07-20
    • Add Android.mk file for Android build support
    • Add logging support for Android, in place of standard syslog().
      • @@ -590,7 +590,7 @@
    • Make TPM support optional, dependent on OpenSSL ENGINE support.

    • -
  • OpenConnect v3.10 — 2011-06-30 +
  • OpenConnect v3.10 — 2011-06-30
    • Switch to using GNU autoconf/automake/libtool.
    • Produce shared library for authentication.
      • @@ -600,19 +600,19 @@
    • Add --non-inter option to avoid all user input.

    • -
  • OpenConnect v3.02 — 2011-04-19 +
  • OpenConnect v3.02 — 2011-04-19
    • Install man page in make install target.
    • Add openconnect_vpninfo_free() to libopenconnect.
    • Clear cached peer_addr to avoid reconnecting to wrong host.

    • -
  • OpenConnect v3.01 — 2011-03-09 +
  • OpenConnect v3.01 — 2011-03-09
    • Add libxml2 to pkg-config requirements.

    • -
  • OpenConnect v3.00 — 2011-03-09 +
  • OpenConnect v3.00 — 2011-03-09
    • Create libopenconnect.a for GUI authentication dialog to use.
    • Remove auth-dialog, which now lives in the network-manager-openconnect package.
      • @@ -621,7 +621,7 @@
    • Report error and abort if CA file cannot be opened.

    • -
  • OpenConnect v2.26 — 2010-09-22 +
  • OpenConnect v2.26 — 2010-09-22
    • Fix potential crash on relative HTTP redirect.
    • Use correct TUN/TAP device node on Android.
      • @@ -635,7 +635,7 @@
    • Never include address family prefix on script-tun connections.

    • -
  • OpenConnect v2.25 — 2010-05-15 +
  • OpenConnect v2.25 — 2010-05-15
    • Always validate server certificate, even when no extra --cafile is provided.
    • Add --no-cert-check option to avoid certificate validation.
      • @@ -644,7 +644,7 @@
    • Fix libproxy detection on NetBSD.

    • -
  • OpenConnect v2.24 — 2010-05-07 +
  • OpenConnect v2.24 — 2010-05-07
    • Forget preconfigured password after a single attempt; don't retry infinitely if it's failing.
    • Set $CISCO_BANNER environment variable when running script.
      • @@ -653,7 +653,7 @@
    • Fix DragonFly BSD build.

    • -
  • OpenConnect v2.23 — 2010-04-09 +
  • OpenConnect v2.23 — 2010-04-09
    • Support "Cisco Secure Desktop" trojan in NetworkManager auth-dialog.
    • Support proxy in NetworkManager auth-dialog.
      • @@ -663,7 +663,7 @@
    • Improve workaround for server certificates lacking SSL_SERVER purpose, so that it also works with OpenSSL older than 0.9.8k.

    • -
  • OpenConnect v2.22 — 2010-03-07 +
  • OpenConnect v2.22 — 2010-03-07
    • Fix bug handling port numbers above 9999.
    • Ignore "Connection: Keep-Alive" in HTTP/1.0 to work around server bug with certificate authentication.
      • @@ -675,13 +675,13 @@
    • Fix exit code with --background option.

    • -
  • OpenConnect v2.21 — 2010-01-10 +
  • OpenConnect v2.21 — 2010-01-10
    • Fix handling of HTTP 1.0 responses with keepalive (RH#553817).
    • Fix case sensitivity in HTTP headers and hostname comparison on redirect.

    • -
  • OpenConnect v2.20 — 2010-01-04 +
  • OpenConnect v2.20 — 2010-01-04
    • Fix use-after-free bug in NetworkManager authentication dialog (RH#551665).
    • Allow server to be specified with https:// URL, including port and pathname (which Cisco calls 'UserGroup')
      • @@ -690,14 +690,14 @@
    • Handle HTTP redirection with IPv6 literal addresses.

    • -
  • OpenConnect v2.12 — 2009-12-07 +
  • OpenConnect v2.12 — 2009-12-07
    • Fix buffer overflow when generating useragent string.
    • Cope with idiotic schizoDNS configurations by not repeating DNS lookup for VPN server on reconnects.
    • Support DragonFlyBSD. Probably.

    • -
  • OpenConnect v2.11 — 2009-11-17 +
  • OpenConnect v2.11 — 2009-11-17
    • Add IPv6 support for FreeBSD.
    • Support "split tunnel" mode for IPv6 routing.
      • @@ -705,7 +705,7 @@ CSD trojan if a PKCS#12 certificate was used.

    • -
  • OpenConnect v2.10 — 2009-11-04 +
  • OpenConnect v2.10 — 2009-11-04
    • OpenSolaris support.
    • Preliminary support for IPv6 connectivity.
      • @@ -717,7 +717,7 @@
    • Fix recognition of certificates from OpenSSL 1.0.0.

    • -
  • OpenConnect v2.01 — 2009-06-24 +
  • OpenConnect v2.01 — 2009-06-24
    • Fix bug causing loss of DTLS (and lots of syslog spam about it) after a CSTP reconnection.
      • @@ -728,7 +728,7 @@ chain.

    • -
  • OpenConnect v2.00 — 2009-06-03 +
  • OpenConnect v2.00 — 2009-06-03
    • Add OpenBSD and FreeBSD support.
    • Build with OpenSSL-0.9.7 (Mac OS X, OpenBSD, etc.)
      • @@ -741,7 +741,7 @@
    • Fix segfault in NM auth-dialog when changing hosts.

    • -
  • OpenConnect v1.40 — 2009-05-27 +
  • OpenConnect v1.40 — 2009-05-27
    • Fix validation of server's SSL certificate when NetworkManager runs openconnect as an unprivileged user (which can't read the real user's trust chain file).
    • Fix double-free of DTLS Cipher option on reconnect.
      • @@ -749,12 +749,12 @@
    • Fix reporting of SSL errors through syslog/UI.

    • -
  • OpenConnect v1.30 — 2009-05-13 +
  • OpenConnect v1.30 — 2009-05-13
    • NetworkManager auth-dialog will now cache authentication form options.

    • -
  • OpenConnect v1.20 — 2009-05-08 +
  • OpenConnect v1.20 — 2009-05-08
    • DTLS cipher choice fixes.
    • Improve handling of authentication group selection.
      • @@ -763,14 +763,14 @@
    • Detect TCP connection closure.

    • -
  • OpenConnect v1.10 — 2009-04-01 +
  • OpenConnect v1.10 — 2009-04-01
    • NetworkManager UI rewrite with many improvements.
    • Support for "UserGroups" where a single server offers multiple configurations according to the URL used to connect.

    • -
  • OpenConnect v1.00 — 2009-03-18 +
  • OpenConnect v1.00 — 2009-03-18
    • First non-beta release.
    diff --git a/www/download.xml b/www/download.xml index a742c4ac..a30eeba5 100644 --- a/www/download.xml +++ b/www/download.xml @@ -11,14 +11,14 @@

    Download

    Released versions of OpenConnect are available from the FTP site:

    - +

    Release tarballs (since 3.13) are signed with the PGP key with fingerprint BE07 D9FD 5480 9AB2 C4B0 FF5F 6376 2CDA 67E2 F359.

    -The latest release is OpenConnect v8.10 -(PGP signature), +The latest release is OpenConnect v8.10 +(PGP signature), released on 2020-05-14 with the following changelog:

    • Install bash completion script to ${datadir}/bash-completion/completions/openconnect.
      • -- 2.49.0