ics-openconnect icon indicating copy to clipboard operation
ics-openconnect copied to clipboard

When reconnecting on a network change, support re-authenticating.

Open dseomn opened this issue 7 years ago • 6 comments

I have "Reconnect on network change" checked in the settings, and it works fine for short network changes. However, if I lose network for hours, the reconnect fails when I get network access again. Last time I looked at the logs, it looked like it was trying to reconnect with the old TLS session instead of reauthenticating in a new TLS session. I just disconnected from all networks, and I'll try to post logs later when I reconnect to the network after the TLS session expires.

dseomn avatar Sep 24 '17 01:09 dseomn

It will create new TLS sessions, but your auth cookie has probably expired after being offline for several hours. Reconnection only works if the cookie is still valid. Getting a new cookie may involve re-entering your password / OTP / etc.

cernekee avatar Sep 24 '17 02:09 cernekee

Everything it needs to reauthenticate is saved. When I manually connect, I tap the button for which VPN I want to use, and it doesn't ask me for anything else.

dseomn avatar Sep 24 '17 02:09 dseomn

The app does not currently know how to repeat the authentication flow and obtain a new cookie, although it would be nice if it did.

cernekee avatar Sep 24 '17 02:09 cernekee

Gotcha, thanks for the explanation. I changed the issue title to reflect that this is now a feature request. I assume I don't need to bother posting my logs anymore?

dseomn avatar Sep 24 '17 02:09 dseomn

Correct

cernekee avatar Sep 24 '17 02:09 cernekee

We're implementing a VPN on Android to match an iOS VPN. On iOS, we have to disconnect the VPN interface and re-establish it on network interface changes. Wondering if the same is true with the Android OS.

loganblevins avatar Dec 29 '17 14:12 loganblevins