openconnect with Belgian EID

David Woodhouse dwmw2 at
Fri Nov 15 06:46:11 EST 2013

On Fri, 2013-11-15 at 11:34 +0000, David Woodhouse wrote:
> Christof, what distribution are you using?
> Perhaps I can give you a statically linked version (with newer
> libnettle, newer gnutls, etc.) to test and make sure this works
> correctly?
sha1sum 36ff645e63b23974cd0d55c9cb1f888d3fbcf3eb

It should attempt to pull the issuer cert from PKCS#11 in the same way
that Nikos' code was trying to do it. Please remember to remove the
required cert from your --cafile argument (and perhaps check that the
original openconnect is failing as expected), before reporting that it
works! :)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5745 bytes
Desc: not available
URL: <>

More information about the openconnect-devel mailing list