b64d1c286e
Also update vpnc script. Fixes: - https://nvd.nist.gov/vuln/detail/CVE-2019-16239 - https://nvd.nist.gov/vuln/detail/CVE-2020-12105 - https://nvd.nist.gov/vuln/detail/CVE-2020-12823
42 lines
1.3 KiB
Nix
42 lines
1.3 KiB
Nix
{ stdenv, fetchurl, pkgconfig, openssl ? null, gnutls ? null, gmp, libxml2, stoken, zlib, fetchgit, darwin } :
|
|
|
|
assert (openssl != null) == (gnutls == null);
|
|
|
|
let vpnc = fetchgit {
|
|
url = "git://git.infradead.org/users/dwmw2/vpnc-scripts.git";
|
|
rev = "c0122e891f7e033f35f047dad963702199d5cb9e";
|
|
sha256 = "11b1ls012mb704jphqxjmqrfbbhkdjb64j2q4k8wb5jmja8jnd14";
|
|
};
|
|
|
|
in stdenv.mkDerivation rec {
|
|
pname = "openconnect";
|
|
version = "8.10";
|
|
|
|
src = fetchurl {
|
|
urls = [
|
|
"ftp://ftp.infradead.org/pub/openconnect/${pname}-${version}.tar.gz"
|
|
];
|
|
sha256 = "1cdsx4nsrwawbsisfkldfc9i4qn60g03vxb13nzppr2br9p4rrih";
|
|
};
|
|
|
|
outputs = [ "out" "dev" ];
|
|
|
|
configureFlags = [
|
|
"--with-vpnc-script=${vpnc}/vpnc-script"
|
|
"--disable-nls"
|
|
"--without-openssl-version-check"
|
|
];
|
|
|
|
buildInputs = [ openssl gnutls gmp libxml2 stoken zlib ]
|
|
++ stdenv.lib.optional stdenv.isDarwin darwin.apple_sdk.frameworks.PCSC;
|
|
nativeBuildInputs = [ pkgconfig ];
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "VPN Client for Cisco's AnyConnect SSL VPN";
|
|
homepage = "http://www.infradead.org/openconnect/";
|
|
license = licenses.lgpl21;
|
|
maintainers = with maintainers; [ pradeepchhetri tricktron ];
|
|
platforms = stdenv.lib.platforms.linux ++ stdenv.lib.platforms.darwin;
|
|
};
|
|
}
|