On Sat, Jun 23, 2018 at 12:22 PM, Jeroen Balduyck <jeroen.balduyck at gmail.com> wrote: > Hi > > I've been struggling to get this option to work. Wireshark reports > this cipher in the server hello: > Cipher Suite: TLS_PSK_WITH_AES_256_GCM_SHA384 (0x00a9) Are you sure that the server supports this ciphersuite for *DTLS*, as opposed to TLS? If it's a Cisco AnyConnect server (as opposed to ocserv) then it's a "speshul" pre-1.0 version of DTLS? http://www.infradead.org/openconnect/technical.html Dan