From ecb2a4077f90e6e4699c8250bcf8f7d6221d9fc6 Mon Sep 17 00:00:00 2001
From: Demon_H <b@doubi.fun>
Date: Fri, 16 Sep 2022 15:23:52 +0800
Subject: ocserv: openconnect: T4656: add listen-address CLI option
This will set the listen-host ocserv configuration option.
---
src/conf_mode/vpn_openconnect.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
(limited to 'src')
diff --git a/src/conf_mode/vpn_openconnect.py b/src/conf_mode/vpn_openconnect.py
index 23b1baf4d..e32d83b9e 100755
--- a/src/conf_mode/vpn_openconnect.py
+++ b/src/conf_mode/vpn_openconnect.py
@@ -80,8 +80,9 @@ def verify(ocserv):
return None
# Check if listen-ports not binded other services
# It can be only listen by 'ocserv-main'
+ listen_address = ocserv["listen_address"] if "listen_address" in ocserv else '0.0.0.0'
for proto, port in ocserv.get('listen_ports').items():
- if check_port_availability('0.0.0.0', int(port), proto) is not True and \
+ if check_port_availability(listen_address, int(port), proto) is not True and \
not is_listen_port_bind_service(int(port), 'ocserv-main'):
raise ConfigError(f'"{proto}" port "{port}" is used by another service')
# Check authentication
--
cgit v1.2.3