openconnect: Support use of a proxy server

Allow connection via a proxy server (required on some sites where
direct outbound HTTP(S) access is not permitted).

Signed-off-by: Michael Brown <redacted>

diff --git a/net/openconnect/README b/net/openconnect/README
index e7c60d76546e5952af4cc4800ac6fa36a43b3e40..1a645773a37305478d4e40f6998ceba8435ecf9f 100644 (file)
--- a/net/openconnect/README
+++ b/net/openconnect/README
@@ -11,6 +11,7 @@ config interface 'MYVPN'
        option password 'secret'
        option serverhash 'AE7FF6A0426F0A0CD0A02EB9EC3C5066FAEB0B25'
        option defaultroute '0'
+       # option proxy 'http://proxy.example.com:8080'
        option authgroup 'DEFAULT'
        # usergroup option, if required by some servers
        # option usergroup 'USERGROUP'

diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh
index 6a7d122750e01e9c9339193a842680074eac7919..449ce8bc3bc82ab3715dbeeedb655814ec077bf9 100755 (executable)
--- a/net/openconnect/files/openconnect.sh
+++ b/net/openconnect/files/openconnect.sh
@@ -32,6 +32,7 @@ proto_openconnect_init_config() {
        proto_config_add_string "token_script"
        proto_config_add_string "os"
        proto_config_add_string "csd_wrapper"
+       proto_config_add_string "proxy"
        proto_config_add_array 'form_entry:regex("[^:]+:[^=]+=.*")'
        no_device=1
        available=1
@@ -57,6 +58,7 @@ proto_openconnect_setup() {
                password \
                password2 \
                port \
+               proxy \
                server \
                serverhash \
                token_mode \
@@ -131,6 +133,7 @@ proto_openconnect_setup() {
        [ -n "$token_secret" ] && append_args "--token-secret=$token_secret"
        [ -n "$os" ] && append_args "--os=$os"
        [ -n "$csd_wrapper" ] && [ -x "$csd_wrapper" ] && append_args "--csd-wrapper=$csd_wrapper"
+       [ -n "$proxy" ] && append_args "--proxy=$proxy"
 
        json_for_each_item proto_openconnect_add_form_entry form_entry