Arch Linux User Repository

Unfortunately, I don't have access to a version newer than 4.10.06079 yet. If there is someone who can help with the update package - please let me know - I'll add to the co-maintainers.

As the comment in the PKGBUILD says (you've read it, right? ;) ), Cisco does not provide public downloads for this, so you have to obtain the installer yourself either through your own Cisco account or through your company's.

Patch for 4.10.05095. Tested with tarball.

4,5c4,5
< _source="installer"   # if installing from .sh installer
< # _source="tarball"     # if installing from .tar.gz package
---
> # _source="installer"   # if installing from .sh installer
> _source="tarball"     # if installing from .tar.gz package
9c9
< pkgver=4.9.05042
---
> pkgver=4.10.05095
43c43
<     _filehash="934f3a06ecc922b1dda719d2c5b7ab7aaf973e10b574d78ecccab26da9982882"
---
>     _filehash="293cf164b75abe068a61b33584a43daf621c08cda4ac5b42f9727d632d2aa36b"
89c89
<         "libaccurl.so.4.5.0"; do
---
>         "libaccurl.so.4.7.0" "libacdownloader.so" "libboost_regex.so"; do
95c95
<     ln -s /opt/cisco/anyconnect/lib/libaccurl.so.4.5.0 "${pkgdir}/opt/cisco/anyconnect/lib/libaccurl.so.4"
---
>     ln -s /opt/cisco/anyconnect/lib/libaccurl.so.4.7.0 "${pkgdir}/opt/cisco/anyconnect/lib/libaccurl.so.4"
118,119c118,119
<     echo "Categories=Network" >> cisco-anyconnect.desktop
<     install -Dm644 cisco-anyconnect.desktop "${pkgdir}/usr/share/applications/cisco-anyconnect.desktop"
---
>     echo "Categories=Network" >> com.cisco.anyconnect.gui.desktop
>     install -Dm644 com.cisco.anyconnect.gui.desktop "${pkgdir}/usr/share/applications/com.cisco.anyconnect.gui.desktop"
141a142
>     install -Dm644 DigiCertAssuredIDRootCA.pem "${pkgdir}/opt/.cisco/certificates/ca/DigiCertAssuredIDRootCA.pem"

Based on the cosandr's suggestion, after updating the PKGBUILD, I can use sudo to run vpnui, great ! Thank all !

For anyconnect-linux64-4.10.05085-predeploy-k9.tar.gz, I found the /opt/cisco/anyconnect/bin/vpnui need sudo to run it.

For some reason I've had to run sudo /opt/cisco/anyconnect/bin/vpnagentd to run Cisco Anyconnect GUI. If I didn't do that it closed after few seconds. Need to investigate if we need to create systemd unit file.

Hello,

I just installed it, but when I try to launch it, it fails with the following critical error:

(Cisco AnyConnect Secure Mobility Client:6126): Gtk-CRITICAL **: 09:23:01.264: gtk_widget_get_scale_factor: assertion 'GTK_IS_WIDGET (widget)' failed

Is there a way around this that someone knows? Maybe it's the error 0BAD-C0DE was talking about (because I'm using KDE).

What do you mean by "simply doesn't work", exactly?

It simply doesn't work on KDE.

Patch for 4.10.03104, tested with tarball.

diff --git a/PKGBUILD b/PKGBUILD
index de3199e..4fa5d4a 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ _source="installer"   # if installing from .sh installer
 # _source="pkg"         # if installing from .pkg package

 pkgname=cisco-anyconnect
-pkgver=4.9.05042
+pkgver=4.10.03104
 pkgrel=1
 pkgdesc='Cisco AnyConnect Secure Mobility Client'
 arch=('x86_64')
@@ -40,7 +40,7 @@ unpack_installer() {

 if [[ "${_source}" == "tarball" ]]; then
     _filename="anyconnect-linux64-${pkgver}-predeploy-k9.tar.gz"
-    _filehash="934f3a06ecc922b1dda719d2c5b7ab7aaf973e10b574d78ecccab26da9982882"
+    _filehash="739d7e34a23601e478f091c046dc590ad7f7e24df8c0a6cd70b4914c5d80ea78"

     prepare() {
         tar xf "$_filename"
@@ -86,13 +86,13 @@ package() {
         "libvpnapi.so" "libacruntime.so" "libacciscossl.so" "libacciscocrypto.so" \
         "cfom.so" "libboost_date_time.so" "libboost_filesystem.so" "libboost_system.so" \
         "libboost_thread.so" "libboost_signals.so" "libboost_chrono.so" \
-        "libaccurl.so.4.5.0"; do
+        "libaccurl.so.4.7.0" "libacdownloader.so" "libboost_regex.so"; do
         install -Dm755 ${lib} "${pkgdir}/opt/cisco/anyconnect/lib/${lib}"
     done

     # the installer copies all the other symlinks, but creates this one
     # for some reason so let's just create it ourselves
-    ln -s /opt/cisco/anyconnect/lib/libaccurl.so.4.5.0 "${pkgdir}/opt/cisco/anyconnect/lib/libaccurl.so.4"
+    ln -s /opt/cisco/anyconnect/lib/libaccurl.so.4.7.0 "${pkgdir}/opt/cisco/anyconnect/lib/libaccurl.so.4"

     # install plugins
     # we intentionally don't install the telemetry plugin here
@@ -115,8 +115,8 @@ package() {
     install -Dm644 resources/vpnui128.png "${pkgdir}/usr/share/icons/hicolor/128x128/apps/cisco-anyconnect.png"

     # no, Cisco, you don't get to have your own menu category
-    echo "Categories=Network" >> cisco-anyconnect.desktop
-    install -Dm644 cisco-anyconnect.desktop "${pkgdir}/usr/share/applications/cisco-anyconnect.desktop"
+    echo "Categories=Network" >> com.cisco.anyconnect.gui.desktop
+    install -Dm644 com.cisco.anyconnect.gui.desktop "${pkgdir}/usr/share/applications/com.cisco.anyconnect.gui.desktop"

     # install license
     for license in "license.txt" "OpenSource.html"; do
@@ -139,6 +139,8 @@ package() {

     # then, install Cisco's, because it doesn't actually trace to any of the trusted roots we have
     # (thanks, VeriSign)
+    install -Dm644 DigiCertAssuredIDRootCA.pem "${pkgdir}/opt/.cisco/certificates/ca/DigiCertAssuredIDRootCA.pem"
+
     install -Dm644 VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem "${pkgdir}/opt/.cisco/certificates/ca/VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem"

     # install custom policy to disable auto updates

Here's my patch for 4.10.01075. I've only tested it with the tarball, I assume it would work with the rest if you update the hash.

diff --git a/PKGBUILD b/PKGBUILD
index de3199e..a23c1c3 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ _source="installer"   # if installing from .sh installer
 # _source="pkg"         # if installing from .pkg package

 pkgname=cisco-anyconnect
-pkgver=4.9.05042
+pkgver=4.10.01075
 pkgrel=1
 pkgdesc='Cisco AnyConnect Secure Mobility Client'
 arch=('x86_64')
@@ -40,7 +40,7 @@ unpack_installer() {

 if [[ "${_source}" == "tarball" ]]; then
     _filename="anyconnect-linux64-${pkgver}-predeploy-k9.tar.gz"
-    _filehash="934f3a06ecc922b1dda719d2c5b7ab7aaf973e10b574d78ecccab26da9982882"
+    _filehash="17e0c960b84051ba5373080b0d5d1f08526b3a2bfa6dce0a48a8bc61defb84e3"

     prepare() {
         tar xf "$_filename"
@@ -86,7 +86,7 @@ package() {
         "libvpnapi.so" "libacruntime.so" "libacciscossl.so" "libacciscocrypto.so" \
         "cfom.so" "libboost_date_time.so" "libboost_filesystem.so" "libboost_system.so" \
         "libboost_thread.so" "libboost_signals.so" "libboost_chrono.so" \
-        "libaccurl.so.4.5.0"; do
+        "libaccurl.so.4.5.0" "libacdownloader.so" "libboost_regex.so"; do
         install -Dm755 ${lib} "${pkgdir}/opt/cisco/anyconnect/lib/${lib}"
     done

@@ -139,6 +139,8 @@ package() {

     # then, install Cisco's, because it doesn't actually trace to any of the trusted roots we have
     # (thanks, VeriSign)
+    install -Dm644 DigiCertAssuredIDRootCA.pem "${pkgdir}/opt/.cisco/certificates/ca/DigiCertAssuredIDRootCA.pem"
+
     install -Dm644 VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem "${pkgdir}/opt/.cisco/certificates/ca/VeriSignClass3PublicPrimaryCertificationAuthority-G5.pem"

     # install custom policy to disable auto updates

You also need to update the hashes to match. Run makepkg -g to get the correct hash. Also, literally of this is described on the wiki.