On Thu, 2014-05-22 at 16:02 -0400, Joe Beiter wrote: > but I'm not sure if that gnutls-cli is what openconnect is calling. I > tried to find a .deb for a later version of gnutls but no luck. Tried > compiling 3.1.24 but can't get past the "libnettle 2.5" requirement. You need to install nettle 2.7 (gnutls 3.2.14 is the latest stable). Nevertheless, could you try p11tool --export 'your pkcs11 url' --login -d 99 regards, Nikos