update of openconnect

update of openconnect

[Tomáš Čech]

It seems that openssl version is from openconnect POV broken and as they
recommended to switch to gnutls I did the change.

Is anyone against this change?

S_W

[PATCH] gnu: openconnect: Update to 7.05.

[Tomáš Čech]

* gnu/packages/vpn.scm (openconnect): Update to 7.05, replace openssl with
  gnutls.
---
 gnu/packages/vpn.scm | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/gnu/packages/vpn.scm b/gnu/packages/vpn.scm
index 9ff8b638..5883f99 100644
--- a/gnu/packages/vpn.scm
+++ b/gnu/packages/vpn.scm
@@ -27,6 +27,7 @@
   #:use-module (gnu packages compression)
   #:use-module (gnu packages gettext)
   #:use-module (gnu packages gnupg)
+  #:use-module (gnu packages gnutls)
   #:use-module (gnu packages openssl)
   #:use-module (gnu packages perl)
   #:use-module (gnu packages pkg-config)
@@ -95,17 +96,17 @@ Only \"Universal TUN/TAP device driver support\" is needed in the kernel.")
 (define-public openconnect
   (package
    (name "openconnect")
-   (version "4.99")
+   (version "7.05")
    (source (origin
             (method url-fetch)
             (uri (string-append "ftp://ftp.infradead.org/pub/openconnect/"
                                 "openconnect-" version ".tar.gz"))
             (sha256 (base32
-                     "1rd8pap455wzkx19i0sy3cqap524b6fwcjvqynxp6lhm01di4bd6"))))
+                     "1i102yr8yp2ny587n6pd966443h1pqxyw5q0n5afq575046jj98g"))))
    (build-system gnu-build-system)
    (inputs
     `(("libxml2" ,libxml2)
-      ("openssl" ,openssl)
+      ("gnutls" ,gnutls)
       ("vpnc" ,vpnc)
       ("zlib" ,zlib)))
    (native-inputs
-- 
2.2.1

Re: update of openconnect

[Andreas Enge]

On Fri, Mar 13, 2015 at 12:55:34AM +0100, Tomáš Čech wrote:
> It seems that openssl version is from openconnect POV broken and as they
> recommended to switch to gnutls I did the change.
> Is anyone against this change?

I have just tried your patch with the new version of openconnect, and it works
for me. Have you checked the pgp signature against the downloaded tarball?
If yes, please push.

Andreas

Re: update of openconnect

[Tomáš Čech]

[-- Attachment #1: Type: text/plain, Size: 660 bytes --]

On Fri, Mar 13, 2015 at 11:35:22AM +0100, Andreas Enge wrote:
>On Fri, Mar 13, 2015 at 12:55:34AM +0100, Tomáš Čech wrote:
>> It seems that openssl version is from openconnect POV broken and as they
>> recommended to switch to gnutls I did the change.
>> Is anyone against this change?
>
>I have just tried your patch with the new version of openconnect, and it works
>for me. Have you checked the pgp signature against the downloaded tarball?
>If yes, please push.

I have verified that downloaded tarball is signed by the key mentioned on the
web and that the key is signed by 341 to me unknown signatures.

I can't do better, sorry.

S_W

[-- Attachment #2: Type: application/pgp-signature, Size: 181 bytes --]

Re: update of openconnect

[Ludovic Courtès]

Tomáš Čech <sleep_walker@suse.cz> skribis:

> On Fri, Mar 13, 2015 at 11:35:22AM +0100, Andreas Enge wrote:
>>On Fri, Mar 13, 2015 at 12:55:34AM +0100, Tomáš Čech wrote:
>>> It seems that openssl version is from openconnect POV broken and as they
>>> recommended to switch to gnutls I did the change.
>>> Is anyone against this change?
>>
>>I have just tried your patch with the new version of openconnect, and it works
>>for me. Have you checked the pgp signature against the downloaded tarball?
>>If yes, please push.
>
> I have verified that downloaded tarball is signed by the key mentioned on the
> web and that the key is signed by 341 to me unknown signatures.

Fine, go ahead.

Thanks,
Ludo’.