blob: f204cdffc051757bfeba2f62c130f190543cd1d0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
|
(use-modules ((gnu packages check)
#:select (python-pytest python-pytest-asyncio python-pytest-httpserver))
((gnu packages freedesktop) #:select (python-pyxdg))
((gnu packages python-build) #:select (python-poetry-core python-toml))
((gnu packages python-crypto)
#:select (python-keyring python-pyotp))
((gnu packages python-web) #:select (python-requests python-urllib3))
((gnu packages python-xyz)
#:select (python-attrs python-charset-normalizer
python-colorama python-prompt-toolkit python-pysocks
python-structlog))
((gnu packages guile-xyz) #:select (guile-ini guile-lib guile-smc))
((gnu packages qt) #:select (python-pyqt-6 python-pyqtwebengine-6))
((gnu packages vpn) #:select (openconnect vpn-slice))
((gnu packages xml) #:select (python-lxml-4.9))
(guix build-system pyproject)
(guix build-system python)
(guix download)
(guix gexp)
(guix git-download)
((guix licenses) #:prefix license:)
(guix packages))
;; Put in the hosts you are interested in here.
(define %hosts
(list "octopus01"
"spacex"))
(define (ini-file name scm)
"Return a file-like object representing INI file with @var{name} and
@var{scm} data."
(computed-file name
(with-extensions (list guile-ini guile-lib guile-smc)
#~(begin
(use-modules (srfi srfi-26)
(ini))
(call-with-output-file #$output
(cut scm->ini #$scm #:port <>))))))
(define python-urllib3-1.26
(package
(inherit python-urllib3)
(version "1.26.15")
(source
(origin
(method url-fetch)
(uri (pypi-uri "urllib3" version))
(sha256
(base32
"01dkqv0rsjqyw4wrp6yj8h3bcnl7c678qkj845596vs7p4bqff4a"))))
(build-system python-build-system)))
(define python-charset-normalizer-2.10
(package
(inherit python-charset-normalizer)
(version "2.1.0")
(source
(origin
(method url-fetch)
(uri (pypi-uri "charset-normalizer" version))
(sha256
(base32 "04zlajr77f6c7ai59l46as1idi0jjgbvj72lh4v5wfpz2s070pjp"))))
(build-system python-build-system)
(arguments (list))
(native-inputs
(modify-inputs (package-native-inputs python-charset-normalizer)
(delete "python-setuptools")))))
(define python-requests-2.28
(package
(inherit python-requests)
(name "python-requests")
(version "2.28.1")
(source (origin
(method url-fetch)
(uri (pypi-uri "requests" version))
(sha256
(base32
"10vrr7bijzrypvms3g2sgz8vya7f9ymmcv423ikampgy0aqrjmbw"))))
(build-system python-build-system)
(arguments (list #:tests? #f))
(native-inputs (list))
(propagated-inputs
(modify-inputs (package-propagated-inputs python-requests)
(replace "python-charset-normalizer" python-charset-normalizer-2.10)
(replace "python-urllib3" python-urllib3-1.26)))))
(define-public openconnect-sso
(package
(name "openconnect-sso")
;; 0.8.0 was released in 2021, the latest update on master HEAD is from
;; 2023.
(properties '((commit . "94128073ef49acb3bad84a2ae19fdef926ab7bdf")
(revision . "0")))
(version (git-version "0.8.0"
(assoc-ref properties 'revision)
(assoc-ref properties 'commit)))
(source
(origin
(method git-fetch)
(uri (git-reference
(url "https://github.com/vlaci/openconnect-sso")
(commit (assoc-ref properties 'commit))))
(file-name (git-file-name name version))
(sha256
(base32 "08cqd40p9vld1liyl6qrsdrilzc709scyfghfzmmja3m1m7nym94"))))
(build-system pyproject-build-system)
(arguments
`(#:phases
(modify-phases %standard-phases
(add-after 'unpack 'use-poetry-core
(lambda _
;; Patch to use the core poetry API.
(substitute* "pyproject.toml"
(("poetry.masonry.api")
"poetry.core.masonry.api"))))
(add-after 'unpack 'patch-openconnect
(lambda* (#:key inputs #:allow-other-keys)
(substitute* "openconnect_sso/app.py"
(("\"openconnect\"")
(string-append "\""
(search-input-file inputs "/sbin/openconnect")
"\""))))))))
(inputs
(list openconnect
python-attrs
python-colorama
python-keyring
python-lxml-4.9
python-prompt-toolkit
python-pyotp
python-pyqt-6
python-pyqtwebengine-6
python-pysocks
python-pyxdg
python-requests
python-structlog
python-toml))
(native-inputs
(list python-poetry-core
python-pytest
python-pytest-asyncio
python-pytest-httpserver))
(home-page "https://github.com/vlaci/openconnect-sso")
(synopsis "OpenConnect wrapper script supporting Azure AD (SAMLv2)")
(description
"This package provides a wrapper script for OpenConnect supporting Azure AD
(SAMLv2) authentication to Cisco SSL-VPNs.")
(license license:gpl3)))
;; Login to the UTHSC VPN fails with an SSLV3_ALERT_HANDSHAKE_FAILURE
;; on newer python-requests.
(define openconnect-sso-uthsc
(package
(inherit openconnect-sso)
(name "openconnect-sso-uthsc")
(inputs
(modify-inputs (package-inputs openconnect-sso)
(replace "python-requests" python-requests-2.28)))))
(define uthsc-vpn
(with-imported-modules '((guix build utils))
#~(begin
(use-modules (guix build utils))
(setenv "OPENSSL_CONF"
#$(ini-file "openssl.cnf"
#~'((#f
("openssl_conf" . "openssl_init"))
("openssl_init"
("ssl_conf" . "ssl_sect"))
("ssl_sect"
("system_default" . "system_default_sect"))
("system_default_sect"
("Options" . "UnsafeLegacyRenegotiation")))))
(setenv "REQUESTS_CA_BUNDLE"
#$(local-file "uthsc-certificate.pem"))
(invoke #$(file-append openconnect-sso-uthsc "/bin/openconnect-sso")
"--server" "$vpn-server" ; ask us for end-point or see UT docs
"--authgroup" "UTHSC"
"--"
"--script" (string-join (cons #$(file-append vpn-slice "/bin/vpn-slice")
'#$%hosts))))))
(program-file "uthsc-vpn" uthsc-vpn)
|
