*		Openconnect tunneling [oconn]

** requirements
- openconnect
- tun/tap interface support

** master iface configuration

*** iface/options
TYPE=oconn

*** iface/oconnoptions
config file for openconnect (see openconnect(8) --config),
do not setup the interface and the files described bellow in
this file,
this file is mandatory

*** iface/oconncert
SSL client certificate, see --certificate in openconnect(8),
this file is optional

*** iface/oconnmcacert
see --mca-certificate in openconnect(8), requires oconncert
file,
this file is optional

*** iface/oconnsslkey
SSL privatekey, see --sslkey in openconnect(8), this file is
optional

*** iface/oconnmcacert
see --mca-key in openconnect(8), requires oconnsslkey file,
this file is optional

*** iface/oconncookie
authentication cookiem see --cookie in openconnect(8), this
file is optional

*** iface/oconncsd
contains script to run instread of trojan, see --csd-wrapper
in openconnect(8),
this file is optional

*** iface/oconnscript
contains script compatible with vpnc-script to configure
network after connection, see --script in openconnect(8),
this file is optional

*** iface/oconnca
additional CA file for server verification, see --cafile in
openconnect(8),
this file is optional

** sample:

--- %< --- oconn0/options
TYPE=oconn
ONBOOT=no
--- %< ----

--- %< --- oconn0/oconnoptions
autgroup GROUP
user USER
form-entry main:password=SECRET
server vpn.domain.com
--- %< ---
