Arch Linux User Repository

Unfortunately, I don't have access to a version newer than 4.10.06079 yet. If there is someone who can help with the update package - please let me know - I'll add to the co-maintainers.

As the comment in the PKGBUILD says (you've read it, right? ;) ), Cisco does not provide public downloads for this, so you have to obtain the installer yourself either through your own Cisco account or through your company's.

For anyconnect-linux64-4.10.05085-predeploy-k9.tar.gz, I found the /opt/cisco/anyconnect/bin/vpnui need sudo to run it.

For some reason I've had to run sudo /opt/cisco/anyconnect/bin/vpnagentd to run Cisco Anyconnect GUI. If I didn't do that it closed after few seconds. Need to investigate if we need to create systemd unit file.

Hello,

I just installed it, but when I try to launch it, it fails with the following critical error:

(Cisco AnyConnect Secure Mobility Client:6126): Gtk-CRITICAL **: 09:23:01.264: gtk_widget_get_scale_factor: assertion 'GTK_IS_WIDGET (widget)' failed

Is there a way around this that someone knows? Maybe it's the error 0BAD-C0DE was talking about (because I'm using KDE).

What do you mean by "simply doesn't work", exactly?

It simply doesn't work on KDE.

Patch for 4.10.03104, tested with tarball.

diff --git a/PKGBUILD b/PKGBUILD
index de3199e..4fa5d4a 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ _source="installer"   # if installing from .sh installer
 # _source="pkg"         # if installing from .pkg package

 pkgname=cisco-anyconnect
-pkgver=4.9.05042
+pkgver=4.10.03104
 pkgrel=1
 pkgdesc='Cisco AnyConnect Secure Mobility Client'
 arch=('x86_64')
@@ -40,7 +40,7 @@ unpack_installer() {

 if [[ "${_source}" == "tarball" ]]; then
     _filename="anyconnect-linux64-${pkgver}-predeploy-k9.tar.gz"
-    _filehash="934f3a06ecc922b1dda719d2c5b7ab7aaf973e10b574d78ecccab26da9982882"
+    _filehash="739d7e34a23601e478f091c046dc590ad7f7e24df8c0a6cd70b4914c5d80ea78"

     prepare() {
         tar xf "$_filename"
@@ -86,13 +86,13 @@ package() {
         "libvpnapi.so" "libacruntime.so" "libacciscossl.so" "libacciscocrypto.so" \
         "cfom.so" "libboost_date_time.so" "libboost_filesystem.so" "libboost_system.so" \
         "libboost_thread.so" "libboost_signals.so" "libboost_chrono.so" \
-        "libaccurl.so.4.5.0"; do
+        "libaccurl.so.4.7.0" "libacdownloader.so" "libboost_regex.so"; do
         install -Dm755 ${lib} "${pkgdir}/opt/cisco/anyconnect/lib/${lib}"
     done

     # the installer copies all the other symlinks, but creates this one
     # for some reason so let's just create it ourselves
-    ln -s /opt/cisco/anyconnect/lib/libaccurl.so.4.5.0 "${pkgdir}/opt/cisco/anyconnect/lib/libaccurl.so.4"
+    ln -s /opt/cisco/anyconnect/lib/libaccurl.so.4.7.0 "${pkgdir}/opt/cisco/anyconnect/lib/libaccurl.so.4"

     # install plugins
     # we intentionally don't install the telemetry plugin here
@@ -115,8 +115,8 @@ package() {
     install -Dm644 resources/vpnui128.png "${pkgdir}/usr/share/icons/hicolor/128x128/apps/cisco-anyconnect.png"

     # no, Cisco, you don't get to have your own menu category
-    echo "Categories=Network" >> cisco-anyconnect.desktop
-    install -Dm644 cisco-anyconnect.desktop "${pkgdir}/usr/share/applications/cisco-anyconnect.desktop"
+    echo "Categories=Network" >> com.cisco.anyconnect.gui.desktop
+    install -Dm644 com.cisco.anyconnect.gui.desktop "${pkgdir}/usr/share/applications/com.cisco.anyconnect.gui.desktop"

     # install license
     for license in "license.txt" "OpenSource.html"; do
@@ -139,6 +139,8 @@ package() {

     # then, install Cisco's, because it doesn't actually trace to any of the trusted roots we have
     # (thanks, VeriSign)
+    install -Dm644 DigiCertAssuredIDRootCA.pem "${pkgdir}/opt/.cisco/certificates/ca/DigiCertAssuredIDRootCA.pem"
+
     install -Dm644 VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem "${pkgdir}/opt/.cisco/certificates/ca/VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem"

     # install custom policy to disable auto updates

Here's my patch for 4.10.01075. I've only tested it with the tarball, I assume it would work with the rest if you update the hash.

diff --git a/PKGBUILD b/PKGBUILD
index de3199e..a23c1c3 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ _source="installer"   # if installing from .sh installer
 # _source="pkg"         # if installing from .pkg package

 pkgname=cisco-anyconnect
-pkgver=4.9.05042
+pkgver=4.10.01075
 pkgrel=1
 pkgdesc='Cisco AnyConnect Secure Mobility Client'
 arch=('x86_64')
@@ -40,7 +40,7 @@ unpack_installer() {

 if [[ "${_source}" == "tarball" ]]; then
     _filename="anyconnect-linux64-${pkgver}-predeploy-k9.tar.gz"
-    _filehash="934f3a06ecc922b1dda719d2c5b7ab7aaf973e10b574d78ecccab26da9982882"
+    _filehash="17e0c960b84051ba5373080b0d5d1f08526b3a2bfa6dce0a48a8bc61defb84e3"

     prepare() {
         tar xf "$_filename"
@@ -86,7 +86,7 @@ package() {
         "libvpnapi.so" "libacruntime.so" "libacciscossl.so" "libacciscocrypto.so" \
         "cfom.so" "libboost_date_time.so" "libboost_filesystem.so" "libboost_system.so" \
         "libboost_thread.so" "libboost_signals.so" "libboost_chrono.so" \
-        "libaccurl.so.4.5.0"; do
+        "libaccurl.so.4.5.0" "libacdownloader.so" "libboost_regex.so"; do
         install -Dm755 ${lib} "${pkgdir}/opt/cisco/anyconnect/lib/${lib}"
     done

@@ -139,6 +139,8 @@ package() {

     # then, install Cisco's, because it doesn't actually trace to any of the trusted roots we have
     # (thanks, VeriSign)
+    install -Dm644 DigiCertAssuredIDRootCA.pem "${pkgdir}/opt/.cisco/certificates/ca/DigiCertAssuredIDRootCA.pem"
+
     install -Dm644 VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem "${pkgdir}/opt/.cisco/certificates/ca/VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem"

     # install custom policy to disable auto updates

You also need to update the hashes to match. Run makepkg -g to get the correct hash. Also, literally of this is described on the wiki.

It failed in the sha256sums test. File anyconnect-linux64-4.9.06037-core-vpn-webdeploy-k9.sh ... FAILED

The version you're using doesn't match the one specified in the PKGBUILD. Edit the PKGBUILD and change the version to the exact one you have.

anyconnect-linux64-4.9.06037-core-vpn-webdeploy-k9.sh