OpenConnect Client for GUI

keamas · November 19, 2016, 10:18am

Hey this router is just awesome I bought this GL-AR300M.
I am just missing a openconnect gui to connect to Cisco devices with this router. For example Company VPNs and so on while I am on the road.

So a GUI integration like OpenVPN would be great or in the Advanced Mode (Open-WRT)

I used the OpenConnect package from Open-Wrt and tried to connect via console:

But no tun0 interface is created and I get always this error message:

Script ‘/lib/netifd/vpnc-script’ returned error 1
Script ‘/lib/netifd/vpnc-script’ returned error 1

It seems like a Bug in OpenWRT

github.com/openwrt/packages

openconnect: Script '/lib/netifd/vpnc-script' returned error 1

opened 07:05PM - 02 Mar 15 UTC

closed 09:06AM - 08 Mar 15 UTC

tillwo

I am unable to establish a connection to a Cisco VPN server using openconnect. G…etting no error at all using the LuCI web interface, I tried running openconnect on the command line and got the error message `Script '/lib/netifd/vpnc-script' returned error 1`: ``` root@OpenWrt:~# openconnect vpn.mydomain.com WARNING: This version of openconnect was built without iconv support but you appear to be using the legacy character set "ASCII". Expect strangeness. POST https://vpn.mydomain.com/ Attempting to connect to server XXX.XXX.XXX.XXX:443 SSL negotiation with vpn.mydomain.com Server certificate verify failed: signer not found Certificate from VPN server "vpn.mydomain.com" failed verification. Reason: signer not found Enter 'yes' to accept, 'no' to abort; anything else to view: yes Connected to HTTPS on vpn.mydomain.com XML POST enabled Please enter your username and password. GROUP: XXX POST https://vpn.mydomain.com/ XML POST enabled Please enter your username and password. Username:XXX Password: POST https://vpn.mydomain.com/ Got CONNECT response: HTTP/1.1 200 OK CSTP connected. DPD 30, Keepalive 20 Script '/lib/netifd/vpnc-script' returned error 1 Script '/lib/netifd/vpnc-script' returned error 1 Connected tun0 as XXX.XXX.XXX.XXX, using SSL Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)-(AES-256-CBC)-(SHA1). ``` The error message seems to be caused by the following code in `/lib/netifd/vpnc-script`: ``` […] #### Main if [ -z "$reason" ]; then logger -t openconnect "this script must be called from vpnc" 1>&2 exit 1 fi if [ -z "$INTERFACE" ]; then logger -t openconnect "this script must be called for an active interface" exit 1 fi […] ``` I don't know if this is a bug in openconnect or vpnc-scripts (or neither). Hopefully, this is the right place to report this.

https://dev.openwrt.org/ticket/18741

This bug is almost 2 years old and not fixed. It workes great on my raspbian Pi with raspbian.

Whould it be possible to port this to from raspbian to a GL-AR300M package?
The best would be to create a owen Client for the GLI Web interface like the OpenVPN Client.

I would love this!!! Or has anyone a hint how to get openconnect client working on the GL-AR300M (OpenWRT)???

alzhao · November 22, 2016, 2:46pm

thanks. Will test this. But I have no cisco devices. Any hint to get one openconnect account?