Tino Lange
fab69fe18c
Set certificate automatically also in openconnect call, if one is set in gp-okta.conf for the requests-dance
2019-06-07 09:37:21 +02:00
Tino Lange
29527325fd
Implement config option cert to use a client certificate.
...
This fixes Issue https://github.com/arthepsy/pan-globalprotect-okta/issues/17 raised by @lvml.
(Note that if you need to specify a client certificate for the `vpn_url`, then most probably
you will also need to give the same certificate to the final `openconnect` call with `--certificate` via the `openconnect_args`)
2019-06-06 09:53:35 +02:00
Aaron Lindsay
58c1d37f93
Add option for second round of Okta authentication
...
This appears to be required for my VPN
2019-06-04 14:04:32 -04:00
Andris Raugulis
45ef74bca3
Implement MFA selection priority (by mfa_order, by line number, by value).
2019-01-22 13:19:28 +00:00
Andris Raugulis
1f8db7d309
Escape backslash in username and other fields, i.e., use single quote.
...
Add work-around for additional username input.
2018-10-08 00:12:59 +00:00
Andris Raugulis
51b8725260
Do not force sudo in default configuration.
2018-09-03 15:05:35 +03:00
Andris Raugulis
76597ea412
Request username/password if empty. Override configuration file
...
settings with environment variables (GP_*). Implement openconnect
command (for sudo/doas cases) and args (for custom vpnc scripts).
Implement execution.
2018-09-03 15:03:16 +03:00
Andris Raugulis
1df901118d
Add gateway support. Add workaround for newline bug in openconnect.
2018-09-03 13:40:29 +03:00
Andris Raugulis
b3201c402a
Add support for OKTA TOTP, fixing #2 .
2018-08-31 12:03:33 +00:00
Andris Raugulis
71fdf176dc
Implement GlobalProtect + OKTA authentication dance. Support TOTP.
2018-04-09 16:48:45 +03:00