os-mnemo/pan-globalprotect-okta
1
0
Fork 0
mirror of https://github.com/os-mnemo/pan-globalprotect-okta synced 2026-07-31 07:44:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rework certificate verification.

Browse Source
This commit is contained in:
Andris Raugulis
2020-05-25 22:24:49 +00:00
parent b53657b767
commit f0a3c8ec2c
2 changed files with 64 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gp-okta.conf
+12 -10
View File
@@ -22,20 +22,22 @@ gateway = NEWYORK1-GW
#totp.symantec = ABCDEFGHIJKLMNOP
# --- certificates
# "certs" is (optional) path to certificate file, which will be overwritten
# and stored with all certificates encountered (in config and portal data).
# by default, "certs" is not specified, so a temporary file will be created.
#
# any "*_cert" is (optional) path to readable and unencrypted certificate
# file, which will be appended to "certs". four specific settings exists:
# any defined "*_cert" is path to readable and unencrypted certificate file.
# "vpn_url_cert" and "okta_url_cert" are used to verify relevant URLs.
# "vpn_cli_cert" and "okta_cli_cert" are used as client certificate.
# any other "*_cert" and "vpn_url_cert" will be added to certs (see below).
#
#okta_url_cert = okta.pem
#okta_cli_cert = okta_cli.pem
#vpn_url_cert = vpn.pem
#vpn_cli_cert = vpn_cli.pem
#
# "certs" is (optional) path to certificate file, which will be overwritten
# and stored with all certificates encountered (in config and portal config).
# by default, "certs" is not specified, so a temporary file will be created.
# it will be used to verify gateways and passed to openconnect executable.
#
#certs = certs.pem
#vpn_url_cert = vpn.pem
#okta_url_cert = okta.pem
#vpn_cli_cert = vpn_cli.pem
#okta_cli_cert = okta_cli.pem
# --- execution
# "execute" (0/1) defines if openconnect (as specified with "openconnect_cmd"