Kernel 2.6.29+ broke Cisco VPN Client

Kernel 2.6.29+ broke Cisco VPN Client

[Mariusz Smykula]

Kernel 2.6.31 go mainstream and there new problem grow up for many
users of poor Cisco VPN Client with certs authentication (there is no
alternative for this). I know, this is not yours problem but maybe
someone can help us and look into cisco vpn client code. There is
problem with freezing system after some time from connection. This
problem start with 2.6.29 kernel.

More info about this:
http://forum.tuxx-home.at/viewforum.php?f=15&sid=8a427ce7fd1fd5b5c5110348e8f0041a
http://www.painfullscratch.nl/code/vpn/
http://ilapstech.blogspot.com/2009/09/cisco-vpn-client-on-karmic-koala.html#comment-form
http://projects.tuxx-home.at/ciscovpn/

Sorry for disturbing.

-- 
Mariusz Smykuła
mariuszs-gmail-com

Re: Kernel 2.6.29+ broke Cisco VPN Client

[Alan Cox]

On Mon, 9 Nov 2009 18:08:40 +0100
Mariusz Smykula <mariuszs@gmail.com> wrote:

> Kernel 2.6.31 go mainstream and there new problem grow up for many
> users of poor Cisco VPN Client with certs authentication (there is no
> alternative for this). 

I must have imagined openconnect. Failing that you need to talk to your
distro if they shipped the module or to cisco.

Alan

Re: Kernel 2.6.29+ broke Cisco VPN Client

[Mariusz Smykula]

On Mon, Nov 9, 2009 at 6:57 PM, Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
> I must have imagined openconnect. Failing that you need to talk to your
> distro if they shipped the module or to cisco.

OpenConnect supports the new Cisco "AnyConnect" SSL VPN, not the old
IPsec-based VPN. Cisco ended support for this software and devices and
is not interested in helping us. All we have is open sourced cisco vpn
client which is broken since 2.6.29.

-- 
Mariusz Smykuła

Re: Kernel 2.6.29+ broke Cisco VPN Client

[Fabio Comolli]

Please have a look at:

http://forum.tuxx-home.at/viewtopic.php?f=15&t=790#p5227

There is a patch there that can be used to make CiscoVPN work with the
latest stable kernels. For me it worked fine (over a wifi connection)
until I lost interest as now I'm able to use vpnc, thanks to the
people on the vpnc support forum.

Hope this helps.

[BTW, CiscoPVN is OT on this list]

On Tue, Nov 10, 2009 at 8:04 AM, Mariusz Smykula <mariuszs@gmail.com> wrote:
> On Mon, Nov 9, 2009 at 6:57 PM, Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
>> I must have imagined openconnect. Failing that you need to talk to your
>> distro if they shipped the module or to cisco.
>
> OpenConnect supports the new Cisco "AnyConnect" SSL VPN, not the old
> IPsec-based VPN. Cisco ended support for this software and devices and
> is not interested in helping us. All we have is open sourced cisco vpn
> client which is broken since 2.6.29.
>
> --
> Mariusz Smykuła
> --
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
>

Re: Kernel 2.6.29+ broke Cisco VPN Client

[Mariusz Smykula]

On Tue, Nov 10, 2009 at 8:48 AM, Fabio Comolli <fabio.comolli@gmail.com> wrote:
> Please have a look at:
>
> http://forum.tuxx-home.at/viewtopic.php?f=15&t=790#p5227
>
> There is a patch there that can be used to make CiscoVPN work with the
> latest stable kernels. For me it worked fine (over a wifi connection)
> until I lost interest as now I'm able to use vpnc, thanks to the
> people on the vpnc support forum.

I have no problem to compile and connect using CiscoVPN + 2.6.31, but
this is unstable solution. After some time (seconds or minutes) whole
computer is freezing dead.

vpnc is no option, because he lacks supports of certs auth.

I think something was changed in kernel Tun-Tap layer (or something
like that) that cause CIscoVPN problem.


-- 
Mariusz Smykuła

Re: Kernel 2.6.29+ broke Cisco VPN Client

[Philipp Matthias Hahn]

Hello,

On Tue, Nov 10, 2009 at 10:49:48AM +0100, Mariusz Smykula wrote:
> On Tue, Nov 10, 2009 at 8:48 AM, Fabio Comolli <fabio.comolli@gmail.com> wrote:
> > Please have a look at:
> >
> > http://forum.tuxx-home.at/viewtopic.php?f=15&t=790#p5227
> >
> > There is a patch there that can be used to make CiscoVPN work with the
> > latest stable kernels. For me it worked fine (over a wifi connection)
> > until I lost interest as now I'm able to use vpnc, thanks to the
> > people on the vpnc support forum.
> 
> I have no problem to compile and connect using CiscoVPN + 2.6.31, but
> this is unstable solution. After some time (seconds or minutes) whole
> computer is freezing dead.
> 
> vpnc is no option, because he lacks supports of certs auth.

You might want to give http://www.shrew.net/software a try. I'd be
interested if this works for you.

BYtE
Philipp
-- 
  / /  (_)__  __ ____  __ Philipp Hahn
 / /__/ / _ \/ // /\ \/ /
/____/_/_//_/\_,_/ /_/\_\ pmhahn@titan.lahn.de