Re: crash with Unknown KMP message 300

2018-02-27 Thread Nikos Mavrogiannopoulos
On Tue, Feb 27, 2018 at 9:36 AM, David Woodhouse wrote: > On Thu, 2018-01-11 at 10:44 +, Jerry van Kooten wrote: >> >> OpenConnect gives me these messages and then crashes: >> >> >> Unrecognised data packet >> Unknown KMP message 300 of size 1427: >> RTNETLINK answers: No such process >> RTNET

Re: [PATCH 00/10] GPST patches, trying again

2018-02-27 Thread David Woodhouse
On Tue, 2018-02-27 at 15:58 +0100, David Woodhouse wrote: > > > I think at first glance, most of the commits from master..gpst can > probably be folded back into the first three commits? I've rebased the gpst branch on top of master, which was the first step. Now I think we're just one 'git reba

Re: [PATCH 00/10] GPST patches, trying again

2018-02-27 Thread David Woodhouse
On Tue, 2018-02-27 at 13:27 +0200, Daniel Lenski wrote: > On Tue, Feb 27, 2018 at 10:29 AM, David Woodhouse wrote: > > and then are we going to refactor them into a more readable patch > > series for review? > > The problem is that at this point the GP patches are interleaved with > non-GP patch

Re: [PATCH v3 0/3] [vpnc-scripts] Support for Pulse's split-exclude routes

2018-02-27 Thread David Woodhouse
On Tue, 2018-02-27 at 12:12 +0100, Gernot Hillier wrote: > By the way, does it still make sense to maintain the script in a > separate repo? Are there still people using your version with vpnc? Yeah, many distributions are now shipping a separate vpnc-scripts package, and both vpnc and openconnect

Re: [PATCH 3/3 v2] add support for checking and submitting HIP reports

2018-02-27 Thread Daniel Lenski
David, Please take a look at my email describing this patch from a couple months ago. It's an annoying design difference between GP and AnyConnect/Juniper… the "CSD" has to run during the connection phase rather than the authentication phase due to the requirement that the client's IP address be k

Re: [PATCH 00/10] GPST patches, trying again

2018-02-27 Thread Daniel Lenski
On Tue, Feb 27, 2018 at 10:29 AM, David Woodhouse wrote: > > > > On Tue, 2018-01-09 at 00:01 -0800, Daniel Lenski wrote: > > Here is a new, cleaned-up set of GlobalProtect patches. > > > > These apply and build cleanly on top of the David's gpst > > (currently at 82d4430da8f593109f90637fafb799a41a

Re: [PATCH v3 0/3] [vpnc-scripts] Support for Pulse's split-exclude routes

2018-02-27 Thread Gernot Hillier
Am 26.02.2018 um 16:27 schrieb David Woodhouse: > > > On Wed, 2018-02-21 at 17:46 +0100, Gernot Hillier wrote: >> OpenConnect already sets the according environment variables when the Pulse >> gateway sends "split-exclude" routes, so we only need to handle them >> in vpnc-script. >> >> Sorry for

[PATCH to fix my PATCH] fix a bug leading to incorrect split-include netmasks

2018-02-27 Thread Daniel Lenski
This bug was my fault. Introduced in 881eb286499baf78afbaeff4dbc5f055d23f1e4f on 15 Oct 2016 ("Correctly handle IPv4 route specified as either 10.1.2.0/255.255.255.0 or 10.1.2.0/24") Left shift of >=32 bits is undefined on x86 (https://stackoverflow.com/a/7471843/20789), and it was causing spli

Re: [PATCH] Save latest ESP sequence number even if replay protection isn't in use

2018-02-27 Thread David Woodhouse
On Mon, 2018-01-08 at 08:51 -0800, Daniel Lenski wrote: > Perhaps the correct solution here is to turn replay protection on as a > warning but not a fatal error, as you suggest. I've done that, which keeps things relatively simple and also means that we base 'old_esp_maxseq' on the received pack

Re: openconnect is not connecting in GUI Ubuntu 16.04 (--no-xmlpost issue)

2018-02-27 Thread David Woodhouse
On Wed, 2018-01-31 at 17:31 +0300, UltraMax wrote: > > I do believe that this is the issue with --no-xmlpost because if I > remove it from command line parameter it is also not working > > Can you help me with this issue? Can you show the full output of openconnect with the --dump-http-traffic o

Re: crash with Unknown KMP message 300

2018-02-27 Thread David Woodhouse
On Thu, 2018-01-11 at 10:44 +, Jerry van Kooten wrote: > > OpenConnect gives me these messages and then crashes: > > > Unrecognised data packet > Unknown KMP message 300 of size 1427: > RTNETLINK answers: No such process > RTNETLINK answers: No such process The 'Unrecognised data packet' me

Re: [PATCH 00/10] GPST patches, trying again

2018-02-27 Thread David Woodhouse
On Tue, 2018-01-09 at 00:01 -0800, Daniel Lenski wrote: > Here is a new, cleaned-up set of GlobalProtect patches. > > These apply and build cleanly on top of the David's gpst > (currently at 82d4430da8f593109f90637fafb799a41a937330, > http://git.infradead.org/users/dwmw2/openconnect.git/shortlog