A small patch over 7.00. I realized that the cipher name got after setup_dtls() is the NULL cipher because handshake isn't complete. I think it is better to return NULL at that point. -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-when-DTLS-is-not-connected-do-not-return-a-bogus-cip.patch Type: text/plain-diff Size: 928 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20141128/2b591b46/attachment.bin>