On Tue, 2014-10-28 at 20:26 +0100, Nikos Mavrogiannopoulos wrote: > > Indeed, that wouldn't work. I believe that if needed that can be > feasible to code (but still quite some work) in either gnutls or > libopenconnect, using gnutls_privkey_import_ext2(). I don't really want it in OpenConnect. I did that for TPM already, and we moved that code into GnuTLS which is arguably where it belongs. I suppose I could try building my Windows binary against OpenSSL and using the CAPI engine :) -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5745 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20141029/433e77d2/attachment.bin>