OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS to provide the secure VPN service. The server is implemented primarily for the GNU/Linux platform but its code is designed to be portable to other UNIX variants as well.
Ocserv's main feature is isolation of the VPN users from the main VPN server process. Each authenticated user is assigned an unprivileged worker process, and a networking (tun) device. That not only eases the control of the resources of each user or group of users, but also prevents privilege escalation due to any bug on the VPN handling (worker) server. Each VPN user can be authenticated using password, PAM, public key (in a smart card or not) or any combination of methods.
Ocserv's main feature is isolation of the VPN users from the main VPN server process. Each authenticated user is assigned an unprivileged worker process, and a networking (tun) device. That not only eases the control of the resources of each user or group of users, but also prevents privilege escalation due to any bug on the VPN handling (worker) server. Each VPN user can be authenticated using password, PAM, public key (in a smart card or not) or any combination of methods.
| Original maintainer | Aron Xu |
|---|---|
| Homepage | http://www.infradead.org/ocserv/ |
1.0.0
0.12.6
0.12.4
0.12.3
0.12.2
0.12.1
0.11.11
0.11.10
0.11.9
0.11.6
0.10.11
| Distribution | Version | Since | Package | Installed | Packager | |
|---|---|---|---|---|---|---|
| deb | 0.12.2-3 | 2019-06-17 | 305 kiB | 758 kiB | Aron Xu |
| deb | 0.12.6-1~bpo10+1 | 2020-02-03 | 372 kiB | 817 kiB | Aron Xu |
| deb | 0.11.6-2 | 2017-11-10 | 278 kiB | 709 kiB | Aron Xu |
| deb | 0.12.2-3~bpo9+1 | 2019-06-17 | 302 kiB | 746 kiB | Aron Xu |
| rpm | 0.11.11-1.fc28 | 2019-01-14 | 348 kiB | 1.2 MiB | Fedora Project |
| rpm | 0.12.1-3.fc29 | 2019-01-14 | 349 kiB | 1.23 MiB | Fedora Project |
| rpm | 0.12.1-3.fc29 | 2019-01-14 | 349 kiB | 1.23 MiB | Fedora Project |
| rpm | 0.12.2-4.fc30 | 2019-06-17 | 338 kiB | 1.36 MiB | Fedora Project |
| rpm | 0.12.4-2.fc31 | 2020-01-07 | 405 kiB | 1.34 MiB | Fedora Project |
| rpm | 1.0.0-1.fc33 | 2020-03-21 | 427 kiB | 1.42 MiB | Fedora Project |
| rpm | 0.11.10-lp150.2.2 | 2019-01-17 | 284 kiB | 850 kiB | https://bugs.opensuse.org |
| rpm | 0.11.10-lp151.3.3 | 2019-01-23 | 284 kiB | 850 kiB | https://bugs.opensuse.org |
| rpm | 0.11.10-lp152.4.4 | 2020-01-07 | 284 kiB | 850 kiB | https://bugs.opensuse.org |
| rpm | 0.11.6-3.2 | 2019-01-17 | 249 kiB | 742 kiB | http://bugs.opensuse.org |
| rpm | 0.12.3-3.1 | 2020-01-24 | 221 kiB | 581 kiB | https://bugs.opensuse.org |
| deb | 0.11.6-2 | 2017-11-10 | 192 kiB | 630 kiB | Ubuntu Developers |
| deb | 0.11.9-1build1 | 2017-11-21 | 197 kiB | 642 kiB | Ubuntu Developers |
| deb | 0.11.9-1build2 | 2019-01-14 | 197 kiB | 643 kiB | Ubuntu Developers |
| deb | 0.12.2-2 | 2019-02-21 | 202 kiB | 663 kiB | Ubuntu Developers |
| deb | 0.12.2-3build1 | 2019-08-23 | 203 kiB | 671 kiB | Ubuntu Developers |
| deb | 0.12.6-1 | 2020-01-19 | 185 kiB | 638 kiB | Ubuntu Developers |
| deb | 0.10.11-1build1 | 2017-11-10 | 166 kiB | 518 kiB | Ubuntu Developers |
Manual pages
occtl(8)
occtl - OpenConnect VPN server control tool
ocpasswd(8)
ocpasswd - OpenConnect server password utility
ocserv(8)
ocserv - OpenConnect VPN server
Latest updates
Fedora rawhide development/Everything-os: Updated from 0.12.6-4.fc32 to 1.0.0-1.fc33
2020-03-21
- Update to upstream 1.0.0 release
Fedora rawhide development/Everything-os: Updated from 0.12.6-3.fc32 to 0.12.6-4.fc32
2020-02-08
Debian 10.0 buster-backports/main: Version 0.12.6-1~bpo10+1 introduced
2020-02-03
- Rebuild for buster-backports.
OpenSUSE Tumbleweed oss: Updated from 0.12.3-2.3 to 0.12.3-3.1
2020-01-24
- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Allow OBS to shortcut through the -mini flavors.
Ubuntu 20.04 focal/universe: Updated from 0.12.5-1 to 0.12.6-1
2020-01-19
- New upstream version 0.12.6
- Remove patch merged upstream
- Sync content of ocserv.conf with upstream sample.config
- Update some default values in ocserv.conf
Fedora 31 releases/Everything-os: Version 0.12.4-2.fc31 introduced
2020-01-07
OpenSUSE Leap 15.2 oss: Version 0.11.10-lp152.4.4 introduced
2020-01-07
- add firewalld service
Ubuntu 20.04 focal/universe: Version 0.12.5-1 introduced
2020-01-07
Fedora rawhide development/Everything-os: Updated from 0.12.6-2.fc32 to 0.12.6-3.fc32
2020-01-04
Fedora rawhide development/Everything-os: Updated from 0.12.5-1.fc32 to 0.12.6-2.fc32
2019-12-30
Fedora rawhide development/Everything-os: Updated from 0.12.4-2.fc31 to 0.12.5-1.fc32
2019-10-23
- Update to upstream 0.12.5 release
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 reintroduced
2019-10-10
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 removed
2019-10-10
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 reintroduced
2019-10-10
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 removed
2019-10-10
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 reintroduced
2019-09-25
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 removed
2019-09-25
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 reintroduced
2019-09-25
Ubuntu 19.10 eoan/universe: Version 0.12.2-3build1 removed
2019-09-25
OpenSUSE Tumbleweed oss: Updated from 0.12.3-2.2 to 0.12.3-2.3
2019-09-17
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1].
Related packages
ocserv-debuginfo - Debug information for package ocserv
ocserv-debugsource - Debug sources for package ocserv
