This is still broken. The post-connect.d workarounds don't work because NetworkManager doesn't get openconnect to use vpnc-scripts any more. So the problem is with nm-openconnect-service-openconnect-helper I guess.
When debugging passed env vars I get (extract) Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_MASKLEN=0 Jul 07 08:48:45 Herbie NetworkManager[634766]: LANGUAGE=en_AU:en Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_DBUS_SERVICE_OPENCONNECT=org.freedesktop.NetworkManager.openconnect.Connection_29 Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_SYSLOG=1 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_MASKLEN=32 Jul 07 08:48:45 Herbie NetworkManager[634766]: PWD=/ Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_MASKLEN=32 Jul 07 08:48:45 Herbie NetworkManager[634766]: LANG=en_AU.UTF-8 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_ADDR=0.0.0.0 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETADDR=192.168.220.116 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_ADDR=10.241.17.31 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_CSTP_OPTIONS=split-include=10.241.17.31/32 Jul 07 08:48:45 Herbie NetworkManager[634766]: split-include=10.241.17.30/32 Jul 07 08:48:45 Herbie NetworkManager[634766]: split-include=0.0.0.0/0 Jul 07 08:48:45 Herbie NetworkManager[634766]: search=officeworks.internal Jul 07 08:48:45 Herbie NetworkManager[634766]: DNS=10.241.17.31 Jul 07 08:48:45 Herbie NetworkManager[634766]: DNS=10.241.17.30 Jul 07 08:48:45 Herbie NetworkManager[634766]: netmask=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: ipaddr=192.168.220.116 Jul 07 08:48:45 Herbie NetworkManager[634766]: INVOCATION_ID=e13e358d737b41ef83b74684c4fdcef3 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_MASK=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_DNS=10.241.17.30 10.241.17.31 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETMASK=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC=3 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETMASKLEN=32 Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_MTU=1422 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_ADDR=10.241.17.30 Jul 07 08:48:45 Herbie NetworkManager[634766]: SHLVL=1 Jul 07 08:48:45 Herbie NetworkManager[634766]: VPNGATEWAY=MYCOMPANYVPNIP Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_DEF_DOMAIN=MYCOMPANY.internal Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_ADDRESS=192.168.220.116 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_MASK=255.255.255.255 Jul 07 08:48:45 Herbie NetworkManager[634766]: TUNDEV=vpn0 Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_MASK=0.0.0.0 Jul 07 08:48:45 Herbie NetworkManager[634766]: GIO_USE_VFS=local Jul 07 08:48:45 Herbie NetworkManager[634766]: JOURNAL_STREAM=9:24405 Jul 07 08:48:45 Herbie NetworkManager[634766]: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin Jul 07 08:48:45 Herbie NetworkManager[634766]: reason=connect Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_PREFIX_TOKEN=634703 Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_LEVEL=0 Jul 07 08:48:45 Herbie NetworkManager[634766]: _=/usr/bin/env
I also get, tellingly: Jul 07 08:48:45 Herbie NetworkManager[634767]: nm-openconnect[634703] <warn> [helper-634767] Ignoring invalid static route prefix '0'
This is still broken. The post-connect.d workarounds don't work because NetworkManager doesn't get openconnect to use vpnc-scripts any more. So the problem is with nm-openconnect- service- openconnect- helper I guess.
When debugging passed env vars I get (extract) 634766] : CISCO_SPLIT_ INC_2_MASKLEN= 0 634766] : LANGUAGE=en_AU:en 634766] : NM_DBUS_ SERVICE_ OPENCONNECT= org.freedesktop .NetworkManager .openconnect. Connection_ 29 634766] : NM_VPN_LOG_SYSLOG=1 634766] : CISCO_SPLIT_ INC_0_MASKLEN= 32 634766] : PWD=/ 634766] : CISCO_SPLIT_ INC_1_MASKLEN= 32 634766] : LANG=en_AU.UTF-8 634766] : CISCO_SPLIT_ INC_2_ADDR= 0.0.0.0 634766] : INTERNAL_ IP4_NETADDR= 192.168. 220.116 634766] : CISCO_SPLIT_ INC_0_ADDR= 10.241. 17.31 634766] : CISCO_CSTP_ OPTIONS= split-include= 10.241. 17.31/32 634766] : split-include= 10.241. 17.30/32 634766] : split-include= 0.0.0.0/ 0 634766] : search= officeworks. internal 634766] : DNS=10.241.17.31 634766] : DNS=10.241.17.30 634766] : netmask= 255.255. 255.255 634766] : ipaddr= 192.168. 220.116 634766] : INVOCATION_ ID=e13e358d737b 41ef83b74684c4f dcef3 634766] : CISCO_SPLIT_ INC_1_MASK= 255.255. 255.255 634766] : INTERNAL_ IP4_DNS= 10.241. 17.30 10.241.17.31 634766] : INTERNAL_ IP4_NETMASK= 255.255. 255.255 634766] : CISCO_SPLIT_INC=3 634766] : INTERNAL_ IP4_NETMASKLEN= 32 634766] : INTERNAL_ IP4_MTU= 1422 634766] : CISCO_SPLIT_ INC_1_ADDR= 10.241. 17.30 634766] : SHLVL=1 634766] : VPNGATEWAY= MYCOMPANYVPNIP 634766] : CISCO_DEF_ DOMAIN= MYCOMPANY. internal 634766] : INTERNAL_ IP4_ADDRESS= 192.168. 220.116 634766] : CISCO_SPLIT_ INC_0_MASK= 255.255. 255.255 634766] : TUNDEV=vpn0 634766] : CISCO_SPLIT_ INC_2_MASK= 0.0.0.0 634766] : GIO_USE_VFS=local 634766] : JOURNAL_ STREAM= 9:24405 634766] : PATH=/usr/ local/sbin: /usr/local/ bin:/usr/ sbin:/usr/ bin:/sbin: /bin:/snap/ bin 634766] : reason=connect 634766] : NM_VPN_ LOG_PREFIX_ TOKEN=634703 634766] : NM_VPN_LOG_LEVEL=0 634766] : _=/usr/bin/env
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
Jul 07 08:48:45 Herbie NetworkManager[
I also get, tellingly: 634767] : nm-openconnect[ 634703] <warn> [helper-634767] Ignoring invalid static route prefix '0'
Jul 07 08:48:45 Herbie NetworkManager[