OK, cool, I'll give it a try and keep you informed. Best regards. Noel Le vendredi 22 septembre 2017 ? 16:03 +0200, Nikos Mavrogiannopoulos a ?crit : > On Fri, Sep 22, 2017 at 4:01 PM, Noel Dieschburg <noel at cblue.be> > wrote: > > Hi David, > > > > First thank you for your quick answer ;) > > > > Do you know if there is a way to do such things (disable RSA-512 > > signin > > algo) without rcompiling the gnu-tls library? I found nothing for > > the > > moement. > > I believe you have to recompile openconnect and set to configure: > --with-default-gnutls-priority="NORMAL:-SIGN-RSA-SHA512" > > (I'd also remove RSA-SHA384 to try with the more common SHA256) > --with-default-gnutls-priority="NORMAL:-SIGN-RSA-SHA512:-SIGN-RSA- > SHA384" > > > regards, > Nikos
