On Fri, Sep 22, 2017 at 4:01 PM, Noel Dieschburg <[email protected]> wrote: > Hi David, > > First thank you for your quick answer ;) > > Do you know if there is a way to do such things (disable RSA-512 signin > algo) without rcompiling the gnu-tls library? I found nothing for the > moement.
I believe you have to recompile openconnect and set to configure: --with-default-gnutls-priority="NORMAL:-SIGN-RSA-SHA512" (I'd also remove RSA-SHA384 to try with the more common SHA256) --with-default-gnutls-priority="NORMAL:-SIGN-RSA-SHA512:-SIGN-RSA-SHA384" regards, Nikos _______________________________________________ openconnect-devel mailing list [email protected] http://lists.infradead.org/mailman/listinfo/openconnect-devel
