openconnect with p7b client certificate

[David Woodhouse]

On Wed, 2016-09-21 at 16:26 +0200, Mikołaj Stefaniak wrote:
> Hello,
> 
> I'm looking for some help with openconnect and p7b client certificate.
> On Windows I can import p7b (that has no private key) certificate to 
> windows cert store and later use it in AnyConnect.

But a PKCS#7 file really does contain only the certificate. You can't
use that on its own; there *needs* to be a private key which
corresponds to it.

At least, you do for client authentication. Or was this just the
certificate for your VPN server, which is otherwise invalid? In that
case, you want to be using the PEM file with the --cafile option, not
the -c option.

-- 
dwmw2


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5760 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20160922/f01ee045/attachment.bin>