On Wed, 2017-01-11 at 20:01 -0800, Daniel Lenski wrote: > > Does anyone else use a Juniper VPN that supports *SSL* DEFLATE > compression? Does it return the same config value? Any hint that I'm > on the right track would be appreciated. If it really means SSL deflate, then that's negotiated as part of the SSL handshake. Can you capture and show the SSL session establishment? Try adding COMP-ALL to the GnuTLS priority string for OpenConnect... -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 4938 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20170113/61155fb0/attachment.bin>