On Wed, Jun 14, 2017 at 2:09 AM, Maxim Baglay <mbaglay92 at gmail.com> wrote: > Hello, > > it's 7.07 with cherry-picked 4ce9c9241f5707917e87e93a055f757cea5fb84d commit. > > Running without --no-http-keepalive did not help. Adding --dump -vvvv > did not show anything more. The same output appears. If I'm understanding your initial email correctly, this same VPN *did work previously* with openconnect? The error you're getting is very early in the SSL connection initiation. You should be able to test this phase of the connection with gnutls-cli, to try to figure out if anything has changed in the SSL handshake negotiation: $ gnutls-cli vpn.company.com -Dan