Connect to openconnect server from the command line?

penguin_pam

I tried finding a similar question and did but there's a caveat though, older questions use --no-cert-check option which is removed due to security reasons and I don't know the exact fingerprint for the server as it will change from time to time. I need to pass two inputs to the openconnect command using something like echo -e "arg1\narg2" but was not successful. How can I do it? (below is the command I used): echo -e "yes\nmypassword" |...

Originally asked by Masked Man on Stack Exchange (askubuntu) (CC BY-SA 4.0).

uphilltech

Great question — answering as the UphillTech team:

You should avoid scripting the yes response to the certificate prompt. If OpenConnect is asking you to confirm the server certificate, the safer approach is to explicitly pin the server certificate using --servercert , rather than accepting it interactively every time. First, connect manually once and let OpenConnect show you the certificate fingerprint. It usually prints a value like: pin-sha256:... Then use that value explicitly: printf '%s\n' 'mypassword' | sudo openconnect serveraddress \ --user="myuser" \ --passwd-on-stdin \ --servercert pin-sha256:YOUR_PIN_HERE That way, only the password is passed through stdin, and the server identity is verified through the pinned certificate. If...

Full answer by Sorin-Doru Ipate: https://askubuntu.stackexchange.com/a/1567751 (CC BY-SA 4.0).

Need it done for your business? UphillTech.