Skip to content

Commit

Permalink
openconnect: Control provider data leak prevention with DisableIPv6 v…
Browse files Browse the repository at this point in the history
…alue

[openconnect] Control provider data leak prevention with DisableIPv6 value. JB#53542

Control the provider data leak prevention value using the OpenConnect
DisableIPv6 to to tell connmand whether to use IPv6 blocking or not.
Value defaults to false.
  • Loading branch information
LaakkonenJussi committed Apr 27, 2021
1 parent 4ab5f78 commit b74707e
Showing 1 changed file with 7 additions and 2 deletions.
9 changes: 7 additions & 2 deletions connman/vpn/plugins/openconnect.c
Expand Up @@ -937,6 +937,7 @@ static int authenticate(struct oc_private_data *data)
const char *key = NULL;
const char *urlpath;
const char *vpnhost;
bool disable_ipv6;

DBG("");

Expand Down Expand Up @@ -974,10 +975,14 @@ static int authenticate(struct oc_private_data *data)
if (urlpath)
openconnect_set_urlpath(data->vpninfo, urlpath);

if (vpn_provider_get_boolean(data->provider,
"OpenConnect.DisableIPv6", false))
disable_ipv6 = vpn_provider_get_boolean(data->provider,
"OpenConnect.DisableIPv6", false);
if (disable_ipv6)
openconnect_disable_ipv6(data->vpninfo);

vpn_provider_set_supported_ip_networks(data->provider, true,
!disable_ipv6);

vpnhost = vpn_provider_get_string(data->provider,
"OpenConnect.VPNHost");
if (!vpnhost || !*vpnhost)
Expand Down

0 comments on commit b74707e

Please sign in to comment.