NetworkManager-openconnect missing support for no-xmlpost

Ask Fedora
,
1

we have to use openconnect for cisco to do vpn. and for some days the option –no-xmlpost has to be used.

in the shell, using openconnect, this works, but adding vpn.openconnect.args=–no-xmlpost or no-xmlpost=yes or xmlpost=no does not end up beeing used.

by using nmcli it shows: “XML POST activated”

so i search for tips, if this is an issue of not passing options to openconnect, or the use of a wrong setting, any ideas?

3

NetworkManager-openconnect supports setting a custom user agent which can serve as a workaround according to this:
Only able to connect with --no-xmlpost (#635) · Issues · OpenConnect VPN projects / OpenConnect · GitLab

4

in my case, the useragent setting was usefull, but now its blocking.
in the shell, it works with –no-xmlpost but in networkmanager connection, it does notwork, nor in gui or with nmcli

5

Here’s the relevant patch:
Add --no-xmlpost to the ui options (!66) · Merge requests · GNOME / NetworkManager-openconnect · GitLab

You can apply it and build the packages with Copr like this:

# Set up Copr CLI
sudo dnf install copr-cli
xdg-open https://copr.fedorainfracloud.org/api/

# Create own repo
COPR_NAME="testing"
COPR_PKG="NetworkManager-openconnect"
COPR_SRC="https://src.fedoraproject.org/rpms/${COPR_PKG}"
COPR_PATCH="https://gitlab.gnome.org/GNOME/\
${COPR_PKG}/-/merge_requests/66.patch"

copr create ${COPR_NAME} \
--chroot fedora-42-$(arch) \
--chroot fedora-43-$(arch) \
--chroot fedora-rawhide-$(arch) \
--enable-net on

copr add-package-custom ${COPR_NAME} \
--name ${COPR_PKG} \
--script-builddeps "git-core wget" \
--script /dev/stdin << EOI
git clone "${COPR_SRC}".git .
wget -O "${COPR_PATCH##*/}" "${COPR_PATCH}"
sed -i -e "
/Disable XMLPOST$/s||& */|
" "${COPR_PATCH##*/}"
sed -i -e "
/^Release:/s|9|10|
/^Source:/a Patch: ${COPR_PATCH##*/}
" "${COPR_PKG}".spec
EOI

copr build-package ${COPR_NAME} \
--name ${COPR_PKG}

Or update from my repo:

1 Like