net/openconnect/files/openconnect.sh

   1 #!/bin/sh
   2 . /lib/functions.sh
   3 . ../netifd-proto.sh
   4 init_proto "$@"
   5
   6 proto_openconnect_init_config() {
   7         proto_config_add_string "server"
   8         proto_config_add_int "port"
   9         proto_config_add_string "username"
  10         proto_config_add_string "serverhash"
  11         proto_config_add_string "authgroup"
  12         proto_config_add_string "password"
  13         no_device=1
  14         available=1
  15 }
  16
  17 proto_openconnect_setup() {
  18         local config="$1"
  19
  20         json_get_vars server port username serverhash authgroup password vgroup
  21
  22         grep -q tun /proc/modules || insmod tun
  23
  24         logger -t openconnect "initializing..."
  25         serv_addr=
  26         for ip in $(resolveip -t 10 "$server"); do
  27                 ( proto_add_host_dependency "$config" "$ip" )
  28                 serv_addr=1
  29         done
  30         [ -n "$serv_addr" ] || {
  31                 logger -t openconnect "Could not resolve server address: '$server'"
  32                 sleep 20
  33                 proto_setup_failed "$config"
  34                 exit 1
  35         }
  36
  37         [ -n "$port" ] && port=":$port"
  38
  39         cmdline="$server$port -i vpn-$config --non-inter --syslog --script /lib/netifd/vpnc-script"
  40
  41         [ -f /etc/openconnect/ca-vpn-$config.pem ] && append cmdline "--cafile /etc/openconnect/ca-vpn-$config.pem"
  42         [ -f /etc/openconnect/user-cert-vpn-$config.pem ] && append cmdline "-c /etc/openconnect/user-cert-vpn-$config.pem"
  43         [ -f /etc/openconnect/user-key-vpn-$config.pem ] && append cmdline "--sslkey /etc/openconnect/user-key-vpn-$config.pem"
  44         [ -n "$serverhash" ] && append cmdline "--servercert=$serverhash"
  45         [ -n "$authgroup" ] && append cmdline "--authgroup $authgroup"
  46         [ -n "$username" ] && append cmdline "-u $username"
  47         [ -n "$password" ] && {
  48                 umask 077
  49                 pwfile="/var/run/openconnect-$config.passwd"
  50                 echo "$password" > "$pwfile"
  51                 append cmdline "--passwd-on-stdin"
  52         }
  53
  54         proto_export INTERFACE="$config"
  55         logger -t openconnect "executing 'openconnect $cmdline'"
  56
  57         if [ -f "$pwfile" ];then
  58                 proto_run_command "$config" /usr/sbin/openconnect-wrapper $pwfile $cmdline
  59         else
  60                 proto_run_command "$config" /usr/sbin/openconnect $cmdline
  61         fi
  62 }
  63
  64 proto_openconnect_teardown() {
  65         local config="$1"
  66
  67         pwfile="/var/run/openconnect-$config.passwd"
  68
  69         rm -f $pwfile
  70         logger -t openconnect "bringing down openconnect"
  71         proto_kill_command "$config"
  72 }
  73
  74 add_protocol openconnect