| Git Clone URL: | https://aur.archlinux.org/pulse-secure.git (read-only, click to copy) |
|---|---|
| Package Base: | pulse-secure |
| Description: | Ivanti Secure Access Client |
| Upstream URL: | https://www.pulsesecure.net/ |
| Licenses: | custom |
| Conflicts: | pulse-connect-secure |
| Submitter: | yan12125 |
| Maintainer: | chiwanpark |
| Last Packager: | chiwanpark |
| Votes: | 35 |
| Popularity: | 0.60 |
| First Submitted: | 2017-09-02 07:40 (UTC) |
| Last Updated: | 2024-12-30 14:31 (UTC) |
@DrJPepper: The latest version of Pulse Secure (9.0R1) requires an outdated version of ICU (version 61 is required, but Arch comes with ICU 62 now). There is an AUR package for icu61, which should do the trick. If you’re using an older version of Pulse Secure, you may need another version of ICU.
However, I’d appreciate if this PKGBUILD could be updated to 9.0R1 with the additional dependency on icu61 to make it work again …
Has anyone gotten this to work recently? Seems to be linked to a lot of outdated libs (even the version from 5-26), and just simlinking the newer version of said libs results in further errors.
I created a branch 'latest-pulse-secure' [1] that uses unofficial RPMs. Use at your own risk.
[1] https://gitlab.com/yan12125/aur/tree/latest-pulse-secure/pulse-secure
@yan12125: Pulse Secure 9.0R1 has been released recently. The only RMP containing 9.0R1 I’ve found so far is http://webdev.web3.technion.ac.il/docs/cis/public/ssl-vpn/ps-pulse-centos-rhel.rpm. Not sure whether there is a more official source though.
@thecrow: Thanks for the info. I switched to the mirror on my school's server temporarily to get the latest version. If you have a link from pulsesecure.net or other ideas, please tell me.
The pulse secure PULSE5.3R4.1 and lower is vulnerability:
The Pulse Linux GUI component does not perform strict SSL certificate validation which allows the attacker to manipulate the Pulse connection set. (https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43620)
This issue is resolved in the following Pulse Secure Desktop Linux client releases PULSE5.3R4.2 Software (Build 639)
Info for the latest version: https://www.pulsesecure.net/techpubs/pulse-client/pulse-secure-client-desktop
Latest unofficial download links: https://wiki.univ-nantes.fr/nomade:document2 I just tried ps-pulse-linux-5.3r4.2-b639-centos-rhel-64-bit-installer.rpm and it's still linked to legacy webkitgtk rather than modern webkit2gtk.
@yan12125 re: link issues. It just seemed like there were less runtime link dependencies on the older webkitgtk2 vs the newer one, so I choose that one to get something running more easily.
@pd5rm: Thanks for the patch, but it's not necessary now. I've adopted webkitgtk and applied the enchant fix. Furthermore, the archlinuxcn team has published prebuilt binaries for webkitgtk. Check my comments at the webkitgtk package.
seems to have less link issues
Mind sharing what's the actual linking issue? It might be a webkitgtk issue and can be solved there.
Sorry, didn't have notifications enabled so didn't see earlier responses. I cleaned up my patch a little (makes the lib stuff more generic), and merge from latest master.
It's basically working around the issue of building webkitgtk from source which is very time consuming by pulling down the related binary bits (icu, enchant, webkitgtk) from archives. It's not a great way to package, but until Pulse starts pushing new builds there's not much else we can do here but workaround it.
@yan12125 I don't know if webkitgtk2 is any better, but seems to have less link issues when I tried. I think webkitgtk is newer in that it has GTK3 support. The versioning is very confusing.
Happy holidays and new year!
I put it in a GIST, since it got garbled a bit. https://gist.github.com/pd5rm/fad6d3800bdf1848d66040e47547db14
Pinned Comments
chiwanpark commented on 2021-02-24 10:21 (UTC)
If you want to use old pulse-secure client 9.1r9, please download the following package.
https://drive.google.com/file/d/1_8tRA-T9vV08n_TpHqdcG5IvalxBuZ7_/view?usp=sharing
The rewritten pulse-secure client requires a service called 'pulsesecure'. Please enable and start the service before running the client.