--servercert option is insecure

[David Woodhouse]

On Thu, 2018-05-10 at 21:28 +0000, Ryan Taylor wrote:
> 
> (Side side note: the reason this came up in the first place is that
> our certificate is not being recognized by openconnect, despite (as
> far as I can tell) being signed by a CA that is included in the trust
> store of the OS, and being accepted by firefox.)

Which OS, and what is "the trust store of the OS"? 

-- 
dwmw2