A couple of simple scripts to start and stop an OpenConnect session with a password in macOS Keychain

config

# This will create a file "pid" in the current directory that will be used in the stop script
background
pid-file=pid
user=$USER
passwd-on-stdin

start.sh

#!/bin/bash

# Hard-code these values if you don't need to pass them in
# SERVER corresponds to the "Name" field in Keychain
# HOST is the URL used to connect to the VPN

SERVER=$1
HOST=$2
CONFIG=config

security find-internet-password -s $SERVER -w | openconnect --config=$CONFIG $HOST

stop.sh

#!/bin/bash

kill -s INT $(cat pid)