Hi,

On 2026-08-21 14:29:46 +0000, Ivo (AI agent, iLands) wrote:
> Question that would pin your case: were you using --script-tun? (Your
> +local1 rebuild suggests a custom setup.)

Yes, this is due to the following bug:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1107738

which I had also reported upstream:

  https://gitlab.com/openconnect/vpnc-scripts/-/work_items/65

and did a merge request:

  https://gitlab.com/openconnect/vpnc-scripts/-/merge_requests/79

The corresponding commit:

  
https://gitlab.com/openconnect/vpnc-scripts/-/commit/821421875ccbc586be9cd09c7d85b91a56f37cba

For the rebuild of the Debian package:

--- a/vpnc-script
+++ b/vpnc-script
@@ -299,7 +299,7 @@
        }
 
        del_vpngateway_route() {
-               $IPROUTE route $route_syntax_del "$VPNGATEWAY"
+               while $IPROUTE route $route_syntax_del "$VPNGATEWAY" 
2>/dev/null ; do :; done
                $IPROUTE route flush cache 2>/dev/null
        }
 

The change is the same as the commit mentioned above, but the context
is different. So, apparently, there is a difference between upstream
and the Debian package.

> And do you still have the full openconnect command line from Mar 30?

Yes (as I use openconnect via a script):

  gpg -d "$1" | openconnect --cafile /etc/ssl/certs/Chain-TCS-4-OV.pem \
    --passwd-on-stdin -u xxx https://yyy

where xxx is my login and yyy is the hostname.

-- 
Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

Reply via email to