On Tue, 2013-11-05 at 16:58 +0100, Christof Haerens wrote: > Had done both (with and without the no-cert-check) after the exports > to myca.crt and same problem. > > Will see to capture the traffic. Any preferred format or tool? tcpdump -i $IFACE -s 1500 host $VPNSERVER and tcp port 443 -w foo.cap Mail it to me in private if you prefer, although this is nothing that couldn't be sniffed by anyone between you and the server (including any wifi hotspots you connect to the VPN from, etc.) -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5745 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20131105/8e0a19b3/attachment.bin>