On Wed, 2016-09-21 at 16:26 +0200, Miko?aj Stefaniak wrote: > Hello, > > I'm looking for some help with openconnect and p7b client certificate. > On Windows I can import p7b (that has no private key) certificate to? > windows cert store and later use it in AnyConnect. But a PKCS#7 file really does contain only the certificate. You can't use that on its own; there *needs* to be a private key which corresponds to it. At least, you do for client authentication. Or was this just the certificate for your VPN server, which is otherwise invalid? In that case, you want to be using the PEM file with the --cafile option, not the -c option. -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5760 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20160922/f01ee045/attachment.bin>