On Wed, Aug 8, 2018 at 11:49 AM, Nikos Mavrogiannopoulos <[email protected]> wrote: > What openconnect client is missing is a way to > set the ciphersuite preferrence of the client (in TLS or DTLS) by > command line. Feel free to submit a patch to address that; note that > these are already configurable if you have control on the server side.
It'd be trivial to add an option to set vpninfo->gnutls_prio, The problem, I think, is that such an option wouldn't work for both GnuTLS and OpenSSL. This would be handy so that the Android client could prefer Chacha20/Poly1305, which I'm led to believe performs better than AES without hardware acceleration. Dan _______________________________________________ openconnect-devel mailing list [email protected] http://lists.infradead.org/mailman/listinfo/openconnect-devel
