On Wed, Aug 8, 2018 at 11:49 AM, Nikos Mavrogiannopoulos <n.mavrogiannopoulos at gmail.com> wrote: > What openconnect client is missing is a way to > set the ciphersuite preferrence of the client (in TLS or DTLS) by > command line. Feel free to submit a patch to address that; note that > these are already configurable if you have control on the server side. It'd be trivial to add an option to set vpninfo->gnutls_prio, The problem, I think, is that such an option wouldn't work for both GnuTLS and OpenSSL. This would be handy so that the Android client could prefer Chacha20/Poly1305, which I'm led to believe performs better than AES without hardware acceleration. Dan
