On Mon, 2014-11-03 at 14:54 +0000, David Woodhouse wrote: > We could potentially declare that it's only valid to call > openconnect_get_cstp_cipher() when CSTP is actually *connected*... but > CSTP can disconnect due to DPD and reconnect at *any* time, so that > seems a little inappropriate. Maybe it makes sense to cache that value once a handshake is complete, and return the const string from the get_cipher functions. In that case it would return the value of the last channel that was available. regards, Nikos