From b606dd812cf614ebf122bf3e16747af4f73fb274 Mon Sep 17 00:00:00 2001 From: Daniel Lenski Date: Tue, 20 Apr 2021 21:35:25 -0700 Subject: [PATCH] Add GlobalProtect IPv6 to docs and changelog Signed-off-by: Daniel Lenski --- www/changelog.xml | 2 +- www/globalprotect.xml | 7 +++---- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/www/changelog.xml b/www/changelog.xml index db256c8c..cde6422d 100644 --- a/www/changelog.xml +++ b/www/changelog.xml @@ -22,7 +22,7 @@
  • With --allow-insecure-crypto, additionally try to disable system-wide and library minimum crypto policies (!158, #132)
  • Add obsolete-server-crypto test (!114)
  • Allow protocols to delay tunnel setup and shutdown (!117)
  • -
  • Incomplete, speculative support for GlobalProtect IPv6 (!155; previous work in d6db0ec)
  • +
  • Support for GlobalProtect IPv6 (!155 and !188; previous work in d6db0ec)
  • SIGUSR1 causes OpenConnect to log detailed connection information and statistics (!154)
  • Allow --servercert to be specified multiple times in order to accept server certificates matching more than one possible fingerprint (!162, #25)
  • Add insecure debugging build mode for developers (!112)
  • diff --git a/www/globalprotect.xml b/www/globalprotect.xml index f863a781..a91d07b6 100644 --- a/www/globalprotect.xml +++ b/www/globalprotect.xml @@ -98,10 +98,9 @@ encapsulating each packets within ESP, UDP, and IP.

    IPv6 support was added in GlobalProtect -4.0 in 2017 but OpenConnect support for GlobalProtect IPv6 is incomplete -due to developers' lack of access to a GlobalProtect VPN server that supports it. -If you have access to a GlobalProtect VPN that supports IPv6, please send information -to the mailing list so we can add complete support.

    +4.0 in 2017. OpenConnect has experimental support for GlobalProtect IPv6 as of +9.0. If you have access to a GlobalProtect VPN that supports IPv6, please send +feedback to the mailing list.

    The ESP and HTTPS tunnels cannot be connected simultaneously. The ESP tunnel becomes unresponsive as soon as the HTTPS tunnel is started, and -- 2.50.1