Hi, does openconnect check the server certificate? If I look at https://vpn.uni-giessen.de/ using firefox, there's no problem. If I direct firefox to the alias https://vpn1-outside.uni-giessen.de/ I get an error message, as it should be. openconnect ( v2.01, Debian squeeze) connects to both host names without complaints. I tried to use the --cafile=FILE option, but this doesn't stop openconnect from connecting. I supplied the server cert using --servercert, but I always get the message Server SSL certificate didn't match: 8315d5412c1a2adb6995fc575a30d949cd5ade43 This message is wrong, as far as I can see. Gr??e Johannes