Arch Linux User Repository

Unfortunately, I don't have access to a version newer than 4.10.06079 yet. If there is someone who can help with the update package - please let me know - I'll add to the co-maintainers.

As the comment in the PKGBUILD says (you've read it, right? ;) ), Cisco does not provide public downloads for this, so you have to obtain the installer yourself either through your own Cisco account or through your company's.

@c3101, Thanks for your input! This also solved my problem coming from Artix base w/ runit.

" c3101 commented on 2023-11-21 13:47 (UTC) A recent upgrade of libxml2 broke anyconnect for me, I had to downgrade to > libxml2=2.11.5-1 and add it to IgnorePkg in pacman.conf in order to get anyconnect to work again. I assume it's not libxml2 fault, seems like they did some big changes and updates, but one has to wonder how long cisco is going to take with a fix of some sorts. " Here's what my IgnorePkg looks like now 😉

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
IgnorePkg   = libxml2
#IgnoreGroup =

@marcin, Thanks. This is also required for my setup.

" marcin commented on 2023-10-26 23:05 (UTC) For MFA to work, libwebkit2gtk needs to be installed. "

@labaman here's the latest AnyConnect for Linux :) https://drive.google.com/file/d/1Mn2nVghxXIgodZn1xfV4tR4RNQOJ7fi8/view?usp=sharing

Hello,

Since some of the Arch updates in the last few days, I keep getting issues with the VPN connection starting and ending up with an error 'Connection Attempt has timed out. Please verify internet connectivity.'

Any tips to fix this?

A recent upgrade of libxml2 broke anyconnect for me, I had to downgrade to libxml2=2.11.5-1 and add it to IgnorePkg in pacman.conf in order to get anyconnect to work again. I assume it's not libxml2 fault, seems like they did some big changes and updates, but one has to wonder how long cisco is going to take with a fix of some sorts.

Also for what it's worth, I just got my AnyConnect vpn working with openconnect again! I had to paste in a user agent after it stopped working recently. The useragent I used is "AnyConnect Linux_64 4.10.07061" in case this helps anyone out. I'd rather not use this bad software made by a bad company so I'm removing anyconnect now :)

I have access to cisco-secure-client-linux64-5.1.0.136, would you like a copy? I installed it manually and it seems to work where this older one in the AUR starts transparent and then crashes as @xavierbaez said.

Let me know how you'd like me to share it and I will :)

Patches for latest secureclient can be found here: https://github.com/ariel-miculas/cisco-secureclient

For MFA to work, libwebkit2gtk needs to be installed.

Why was the source installer/tarball/pkg selection feature removed in https://aur.archlinux.org/cgit/aur.git/commit/PKGBUILD?h=cisco-anyconnect&id=c4e5513e93d2c3334e416c1f755e4d70055c0641 ?

That was convenient for people like me who get a xxx-webdeploy-k9.sh file, I guess I'm not the only one for who it was very useful.

In anycase here's a patch for current -HEAD which brings it back for version 4.10.07061. The only good hash is for anyconnect-linux64-4.10.07061-core-vpn-webdeploy-k9.sh as it's the only file in my possession but it's trivial to change the hash once you download it.

diff --git a/.SRCINFO b/.SRCINFO
index ad4d6f3..b4b03ce 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = cisco-anyconnect
        pkgdesc = Cisco AnyConnect Secure Mobility Client
-       pkgver = 4.10.06090
+       pkgver = 4.10.07061
        pkgrel = 1
        url = https://www.cisco.com/c/en/us/products/security/anyconnect-secure-mobility-client/index.html
        arch = x86_64
@@ -13,11 +13,15 @@ pkgbase = cisco-anyconnect
        optdepends = gtk3: required by acwebhelper
        optdepends = webkit2gtk: required by acwebhelper
        options = !strip
-       source = anyconnect-linux64-4.10.06090-predeploy-k9.tar.gz::https://github.com/Labaman/cisco-anyconnect-bin/raw/main/anyconnect-linux64-4.10.06090-predeploy-k9.tar.gz
+       source = anyconnect-linux64-4.10.07061-core-vpn-webdeploy-k9.sh
        source = cisco-anyconnect.sh
+       source = cisco-anyconnect-profile.sh
+       source = cisco-anyconnect-profile.csh
        source = AnyConnectLocalPolicy.xml
-       sha256sums = db4b0266a42ddf83a758b8be96adcd09e4a789624e26143ae118542c44bb1b54
+       sha256sums = 8a9c8db638548c50f352cfeb0cbbb162464bbc161acf04dd146de1df3773ec01
        sha256sums = 200ab27674568ac32b939c02bba051f90cf59d6ca087746a1e54c5a7ac207dbc
+       sha256sums = dcc7a5dcbe4387f3e4a2a3f260b4197faf1b79adddf0d4dad3a02bc6041effa6
+       sha256sums = 0fcd62bd5d734c239bb7bda7c7e7791b9b8d76a019d2b42ff74caa998e7e9733
        sha256sums = b7c65a236e671d3eb527a3377e22b66018c450d726f71fa6344530a75255dac7

 pkgname = cisco-anyconnect
diff --git a/PKGBUILD b/PKGBUILD
index d8073eb..9ca1f49 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,8 +2,12 @@
 # Contributor: Michael Duncan Hammond <mhammond9@radford.edu>
 # Contributor: K900 <me@0upti.me>

+_source="installer"   # if installing from .sh installer
+# _source="tarball"     # if installing from .tar.gz package
+# _source="pkg"         # if installing from .pkg package
+
 pkgname=cisco-anyconnect
-pkgver=4.10.06090
+pkgver=4.10.07061
 pkgrel=1
 pkgdesc='Cisco AnyConnect Secure Mobility Client'
 url='https://www.cisco.com/c/en/us/products/security/anyconnect-secure-mobility-client/index.html'
@@ -21,15 +25,56 @@ license=('custom')
 # stripping the binaries trips some sort of an integrity check inside vpnagentd
 options=('!strip')

+if [[ "${_source}" == "tarball" ]]; then
+    _filename="anyconnect-linux64-${pkgver}-predeploy-k9.tar.gz"
+    _filehash="934f3a06ecc922b1dda719d2c5b7ab7aaf973e10b574d78ecccab26da9982882"
+
+    prepare() {
+        tar xf "$_filename"
+    }
+elif [[ "${_source}" == "installer" ]]; then
+    _filename="anyconnect-linux64-${pkgver}-core-vpn-webdeploy-k9.sh"
+    _filehash="8a9c8db638548c50f352cfeb0cbbb162464bbc161acf04dd146de1df3773ec01"
+
+    prepare() {
+        unpack_installer
+    }
+elif [[ "${_source}" == "pkg" ]]; then
+    _filename="anyconnect-linux64-${pkgver}-webdeploy-k9.pkg"
+    _filehash="ac5026ab293e7cad6344db71557ae821c26bd4c3f51628949ad2afc797792816"
+
+    prepare() {
+        unzip -j "${_filename}" "binaries/${_installer_filename}"
+        unpack_installer
+    }
+else
+    echo "Please set the _source variable in PKGBUILD to either 'tarball', 'installer' or 'pkg'!"

add me and I will upload the software