Hello Openconnect Team, I have been trying to build and run your software but I am running into some issues. Please forgive me if this information already exists somewhere else. I am trying to get my smartcard to function with openconnect on Mac and Linux, but I have not had much luck. 1. On MacOS 10.14, does openconnect support Apple's CryptoTokenKit? I know there is PKCS#11 support, but if I have a build of openconnect with PKCS#11 support, will it work with CryptoTokenKit? If not, is OpenSC the best option? 2. I am trying to build openconnect via Homebrew on my Mac with openssl. While I have been successful building using the option “--without-gnutls”, I cannot get PKCS#11 support in the same build. When I drop that option, the PKCS#11 support comes back. Is PKCS#11 supported with openssl on Mac? 3. In Ubuntu 18.04, I am running openconnect v7.08-3 (installed via apt-get), but I get an error "SSL connection failure: Key usage violation in certificate has been detected." The gnutls faq (https://gnutls.org/faq.html) says that "newer versions of GnuTLS will also allow such key usage violations (and will only output a warning message)". Is there an option or some other way to tell openconnect to ignore this error? Thanks for the help. S _______________________________________________ openconnect-devel mailing list openconnect-devel@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/openconnect-devel
