lede-packages-rs

commit 05999937ed85a63057dc03becc98ef18593708e8
parent be753f0208b7b517022bacbaf7a6cee2213ae95d
Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat, 29 Nov 2014 19:05:04 +0100

openconnect: when serverhash or cafile are present, set --no-system-trust

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Diffstat:
M
net/openconnect/files/openconnect.sh
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh
@@ -38,10 +38,10 @@ proto_openconnect_setup() {
 
 	cmdline="$server$port -i vpn-$config --non-inter --syslog --script /lib/netifd/vpnc-script"
 
-	[ -f /etc/openconnect/ca-vpn-$config.pem ] && append cmdline "--cafile /etc/openconnect/ca-vpn-$config.pem"
+	[ -f /etc/openconnect/ca-vpn-$config.pem ] && append cmdline "--no-system-trust --cafile /etc/openconnect/ca-vpn-$config.pem"
 	[ -f /etc/openconnect/user-cert-vpn-$config.pem ] && append cmdline "-c /etc/openconnect/user-cert-vpn-$config.pem"
 	[ -f /etc/openconnect/user-key-vpn-$config.pem ] && append cmdline "--sslkey /etc/openconnect/user-key-vpn-$config.pem"
-	[ -n "$serverhash" ] && append cmdline "--servercert=$serverhash"
+	[ -n "$serverhash" ] && append cmdline "--no-system-trust --servercert=$serverhash"
 	[ -n "$authgroup" ] && append cmdline "--authgroup $authgroup"
 	[ -n "$username" ] && append cmdline "-u $username"
 	[ -n "$password" ] && {