Index

1. openconnect for the Raspberry Pi-4 running 32 bit raspbian

• to use openconnect on a Raspberry Pi-4 to connect to the University of South Wales network you can use the following commands:
• firstly you need to change your /etc/apt/sources.list file so that it searches the packages on floppsie.comp.glam.ac.uk

• #
  #  USW raspbian repro
  #
  
  
  deb http://floppsie.comp.glam.ac.uk/raspbian/ buster main
  deb-src http://floppsie.comp.glam.ac.uk/raspbian/ buster main

2. Installing openconnect

• in a command line terminal type:

• $ sudo gpg --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys 41038A7635126B4A
  $ sudo gpg --export --armor 41038A7635126B4A | sudo apt-key add -
  $ sudo apt update
  $ sudo apt install usw-openssl
  $ sudo apt install usw-openconnect

3. Running openconnect

• again from the terminal:

• $ sudo openconnect --user=yourusernamegoeshere vpn.southwales.ac.uk

• you need to replace yourusernamegoeshere with your Windows user name
  • you will be presented with a few queries about whether you trust the southwales vpn server!
  • assuming you type yes to these questions you should see:
• 
  Enter 'yes' to accept, 'no' to abort; anything else to view: yes

  XML POST enabled
  Please enter your username and password.
  Password:

• type your Windows password carefully after the prompt, there is no feedback at all during the typing.
  • it may require you to type your password twice (invariably the first time fails!)

• POST https://j1asa5516x-vpn3-ge11.net.southwales.ac.uk/
  Got CONNECT response: HTTP/1.1 200 OK
  CSTP connected. DPD 30, Keepalive 20
  Connected as 172.28.77.188, using SSL, with DTLS in progress
  Established DTLS connection (using OpenSSL). Ciphersuite DTLSv0.9-AES128-SHA.
  Failed to read from SSL socket
  Failed to recv DPD request (-5)

• ignore the last two lines, the program has connected!
  • leave this window running, it is maintaining a vpn connection to the cisco server
  • you will return to this window at the end of these notes
• create a new terminal window, and type:

• $ ssh -u u01234567 mcgreg.comp.glam.ac.uk

• you can now connect using your GNU/Linux username/password combination
  • you will need to substitute u01234567 with your GNU/Linux username
  • the password prompt will accept your password with no visible feedback
    • if you mistype your password you can press ^U to erase all characters or backspace to delete the last character
• once you have finished connecting via ssh you can return to the first terminal window and press ^C which shuts down the vpn link to the cisco vpn server
  

4. Obtaining the source

• as a normal user you can obtain the source code via:

• $ apt-get source usw-openconnect
  $ apt-get source usw-openssl

Index

This document was produced using groff-1.22.