On 11/5/19, 2:52 AM, "Nikos Mavrogiannopoulos" <n.mavrogiannopoulos@xxxxxxxxx> wrote: > This seems to match both the mobile and non-mobile agent. Is that > intentional? We don't have automated tests for them, so we'd need some > testing with recent clients before enabling that. Should we check a > specific version of them? I remember several old versions of them had > issues with specific headers. Yes, this is intentional, otherwise the Windows & MacOS client wouldn't work either since ocserv refuses to send them routes for IPv6. > It used to be that openconnect would not read the X-CSTP-DNS-IP6 if I > remember well. I see it is now handled, so we could make ocserv send > the appropriate header that anyconnect would understand as well. Good, so I can safely make that change. > Would you like to send the patches as a merge request on ocserv > project, and test the server with anyconnect clients? I did the patches (reworked them slightly) and they are in my git tree. I want to do some more testing with other client versions before submitting a merge request. Leendert _______________________________________________ openconnect-devel mailing list openconnect-devel@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/openconnect-devel