Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-23 Thread Modestas Vainius
Hello, Trečiadienis 22 Gegužė 2013 21:43:28 David Woodhouse rašė: > On Tue, 2013-05-21 at 08:55 +0300, Modestas Vainius wrote: > > Yeah, for example, openconnect still complains with error messages after > > XML POST even in non-verbose mode. > > Thanks. Please could you test the second patch I j

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-22 Thread David Woodhouse
On Tue, 2013-05-21 at 08:55 +0300, Modestas Vainius wrote: > > Yeah, for example, openconnect still complains with error messages after XML > POST even in non-verbose mode. Yeah, I suppose we could make that quieter. And I'd accept a patch adding a --no-xmlpost command line if someone were to su

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-20 Thread Modestas Vainius
Control: tags -1 patch Hello, pirmadienis 20 Gegužė 2013 23:56:02 David Woodhouse rašė: > On Mon, 2013-05-20 at 22:56 +0300, Modestas Vainius wrote: > > It appears that the gateway does not like a POST request it gets to its / > > and then invalidates SSL connection. But openconnect does not dete

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-20 Thread David Woodhouse
On Mon, 2013-05-20 at 22:56 +0300, Modestas Vainius wrote: > It appears that the gateway does not like a POST request it gets to its / and > then invalidates SSL connection. But openconnect does not detect this > condition and tries to fallback to GET / on the same connection which has no > chan

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-20 Thread Modestas Vainius
Hello, pirmadienis 20 Gegužė 2013 10:41:27 David Woodhouse rašė: > In http.c, in do_https_request() can you print the contents of > 'buf->data' immediately before the call to openconnect_SSL_write() at > about line 880, and also print the contents of 'form_buf' immediately > after the call to proc

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-20 Thread David Woodhouse
On Mon, 2013-05-20 at 11:40 +0300, Modestas Vainius wrote: > It appears VPN is behind firewall which does IP filtering of some sort > hence it is not publically accessible. > > Is there anything else I can do? Would capturing the whole gateway<- > >openconnect conversation at protocol level (SSL-d

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-20 Thread Modestas Vainius
Hello, On 2013 m. of May 19 d., Sunday 23:03:03 David Woodhouse wrote: > > openconnect stopped prompting me for USERNAME/PASSWORD: > Please provide the address of this server, and I'll look into it. > > Note that there's no harm in giving out the address of the server (it's > a publicly-accessibl

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread David Woodhouse
On Sun, 2013-05-19 at 20:08 +0300, Modestas Vainius wrote: > Hello, > > the error message as it is now I started getting with: > > 1725ee9 http: Rewrite openconnect_obtain_cookie() loop > > However, since > > 4beeace http: Split GET/POST logic into a helper function > > openconnect stopped pro

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread Modestas Vainius
Hello, the error message as it is now I started getting with: 1725ee9 http: Rewrite openconnect_obtain_cookie() loop However, since 4beeace http: Split GET/POST logic into a helper function openconnect stopped prompting me for USERNAME/PASSWORD: # openconnect --no-cert-check -v https://gwaddr

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread Mike Miller
On Sun, May 19, 2013 at 11:29 AM, Modestas Vainius wrote: > Hello, > > Sekmadienis 19 Gegužė 2013 10:59:25 Mike Miller rašė: >> Control: severity -1 important >> >> On Sun, May 19, 2013 at 9:01 AM, Modestas Vainius wrote: >> > I'm no longer able to connect to the gateway (which address I can't >> >

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread Modestas Vainius
Hello, Sekmadienis 19 Gegužė 2013 10:59:25 Mike Miller rašė: > Control: severity -1 important > > On Sun, May 19, 2013 at 9:01 AM, Modestas Vainius wrote: > > I'm no longer able to connect to the gateway (which address I can't > > reveal) > > with 4.99-2 while it was possible with 3.20-4 shipped

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread Mike Miller
Control: severity -1 important On Sun, May 19, 2013 at 9:01 AM, Modestas Vainius wrote: > I'm no longer able to connect to the gateway (which address I can't reveal) > with 4.99-2 while it was possible with 3.20-4 shipped in wheezy > [...] > What is more, I tested 5.00 and saw no improvement. Hi,

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread Modestas Vainius
Hello, Sekmadienis 19 Gegužė 2013 16:01:24 Modestas Vainius rašė: > I'm no longer able to connect to the gateway (which address I can't reveal) > with 4.99-2 while it was possible with 3.20-4 shipped in wheezy (downgrading > to that version in current sid helps as well). Currently I get: > > # op

Bug#708928: regression from 3.20-4: cannot connect to some gateways

2013-05-19 Thread Modestas Vainius
Package: openconnect Version: 4.99-2 Severity: grave Tags: upstream Hello, I'm no longer able to connect to the gateway (which address I can't reveal) with 4.99-2 while it was possible with 3.20-4 shipped in wheezy (downgrading to that version in current sid helps as well). Currently I get: # op