openconnect-gui icon indicating copy to clipboard operation
openconnect-gui copied to clipboard

Add to homebrew

Open sammcj opened this issue 9 years ago • 16 comments

Hello,

It would be great if this could be added to homebrew as MacPorts isn't really used these days (in fact I think it's almost dead).

sammcj avatar Feb 11 '16 03:02 sammcj

Hi, I don't know if MacPorts is dead - at least it's working for me ;-) But, I can make quick look to this if something can be done...

horar avatar Feb 11 '16 11:02 horar

How now i can get openconnect-gui with homebrew? I't seem's to be "ready" =))

vetermanve avatar Sep 22 '16 14:09 vetermanve

sorry for confusing, 'ready' label is created by waffle.io i.e. it mean it's ready to implement ;-) So this feature will be done when the ticket get closed (till end of September if no more problem raise up)

horar avatar Sep 22 '16 16:09 horar

just adding my +1 here. would love to see this on Homebrew!

AlJohri avatar Jan 04 '17 05:01 AlJohri

just make a quick look... cause we build an ".app" bundle, probably we have to create a brew cask

horar avatar Jan 10 '17 20:01 horar

@horar If that's the path you take, I'm not going to object. =)

michaelblyons avatar Jan 10 '17 22:01 michaelblyons

I drop a preview DMG in v1.5.1 release.

If you want build the version from homebrew, please look e.g. here

I'm tackling with support via brew, but it is more time consuming to build qt5 from brew etc. Will finish this later...

horar avatar Feb 12 '17 16:02 horar

homebrew cask is ready... brew cask install openconnect-gui

Please test it, keep in mind, it's quite experimental i.e. GUI isn't very well tested on macOS. When you face some problems, please share as much info as possible (openconnect console version works fine or not, what was your VPN setup, openconnect-gui log file etc.). I will update issue template soon.

Thanks.

horar avatar Feb 14 '17 11:02 horar

Just tried it and I was able to install and run it successfully.

Unfortunately, it seems like connecting via juniper isn't available via the GUI. Is that correct?

This is the command I use to connect using the CLI:

sudo openconnect \
    --background \
    --pid-file=/var/run/openconnect.pid \
    --juniper \
    --user=myawesomeusername \
    --authgroup=TWP-main ra.washpost.com

EDIT: Ah, sorry I just found the option under File -> Profiles -> New Profile (advanced).

AlJohri avatar Feb 14 '17 15:02 AlJohri

Okay, I gave it a shot. I assume the authgroup option shows up after I try to connect (as per https://github.com/openconnect/openconnect-gui/issues/30#issuecomment-174963773). I put in "Juniper Network Connect" as the VPN Protocol and the gateway as ra.washpost.com with my username.

Upon clicking connect, the app immediately shuts down with no crash report.

Here is what I can gather from the openconnect-gui logs:

$ cat "/Users/$USER/Library/Application Support/OpenConnect-GUI Team/OpenConnect-GUI/logs/OpenConnect-GUI.txt"
2017-02-14 10:13:47.1347 | 7fff758d8000 | OpenConnect-GUI VPN client (1.5.1-dirty) logging started...
2017-02-14 10:17:33.1733 | 700000429000 | GET https://ra.washpost.com/
2017-02-14 10:17:33.1733 | 700000429000 | Attempting to connect to server 198.72.15.20:443
2017-02-14 10:17:33.1733 | 700000429000 | Connected to 198.72.15.20:443
2017-02-14 10:17:33.1733 | 700000429000 | SSL negotiation with ra.washpost.com
2017-02-14 10:17:47.1747 | 7fff758d8000 | OpenConnect-GUI VPN client (1.5.1-dirty) logging started...
2017-02-14 10:18:45.1845 | 7000004ac000 | GET https://ra.washpost.com/
2017-02-14 10:18:45.1845 | 7000004ac000 | Attempting to connect to server 198.72.15.20:443

The farthest it got was SSL negotiation the first time and every subsequent time I try it only gets to Attempting to connect.

Using the CLI, the output looks like this:

WARNING: Juniper Network Connect support is experimental.
It will probably be superseded by Junos Pulse support.
GET https://ra.washpost.com/
Connected to 198.72.15.20:443
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
Got HTTP response: HTTP/1.1 302 Found
GET https://ra.washpost.com/dana-na/auth/url_default/welcome.cgi
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
frmLogin
frmLogin
password:
POST https://ra.washpost.com/dana-na/auth/url_default/login.cgi
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
Got HTTP response: HTTP/1.1 302 Moved
GET https://ra.washpost.com/dana-na/auth/url_default/welcome.cgi?p=user-confirm&id=state_68bff8570758c0639c8bd81cb3941d44
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
POST https://ra.washpost.com/dana-na/auth/url_default/login.cgi
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
Got HTTP response: HTTP/1.1 302 Moved
GET https://ra.washpost.com/dana/home/starter0.cgi?check=yes
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
SSL negotiation with ra.washpost.com
Connected to HTTPS on ra.washpost.com
Connected as 10.10.96.42, using SSL
Continuing in background; pid 40573
add host 198.72.15.20: gateway 192.168.1.1
add net 10.10.96.0: gateway 10.10.96.42
delete net default: gateway 192.168.1.1
add net default: gateway 10.10.96.42
ESP session established with server

AlJohri avatar Feb 14 '17 15:02 AlJohri

on windows was reported some crash problem with Juniper protocol (still under investigation). When you cancel the access-elevation request, do you get crash-dialog?

Could you please try attached debug version from here ? Thanks.

horar avatar Feb 14 '17 18:02 horar

When you cancel the access-elevation request, do you get crash-dialog?

I don't understand what you mean by that. I didn't get any crash dialogs. I'll try the debug versions.

AlJohri avatar Feb 14 '17 18:02 AlJohri

When you cancel the access-elevation request, do you get crash-dialog?

I don't understand what you mean by that. I didn't get any crash dialogs. I'll try the debug versions.

I'm sorry; it means - u start the app, then the system ask you for ur credentials. Now you can hit 'cancel' and the app will start without working connection feature

horar avatar Feb 14 '17 18:02 horar

Hi, could someone please try this Homebrew package on macOS (sorry, HighSierra only) - https://github.com/horar/homebrew-openconnect-gui Let me know, thanks.

horar avatar Mar 02 '18 16:03 horar

Currently i have no possibility to check this, i was needed this about a year ago. Thanks for implementing!

On 2 Mar 2018, at 19:41, Ľubomír Carik [email protected] wrote:

Hi, could someone please try this Homebrew package on macOS (sorry, HighSierra only) - https://github.com/horar/homebrew-openconnect-gui https://github.com/horar/homebrew-openconnect-gui Let me know, thanks.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/openconnect/openconnect-gui/issues/88#issuecomment-369977242, or mute the thread https://github.com/notifications/unsubscribe-auth/AAtayM5WwETeq2uR3vSYodIgSD8pOLW4ks5taXY5gaJpZM4HX36d.

vetermanve avatar Mar 04 '18 20:03 vetermanve

@horar the 1.5.3 release works for me, it's reliable enough to be part of our standard Mac build.

DrHyde avatar Jun 06 '18 09:06 DrHyde