On Fri, 2024-03-08 at 11:54 +0100, traxto...@gmail.com wrote: > > if I attempt the gnutls-cli command, I see the following. > gnutls-cli --x509certfile=cert.pem -- > x509keyfile="pkcs11:model=%01%01%04%00%02%01%02%00%00%00%00%00%00%00%00 > %00;manufacturer=STMicro;serial=0000000000000000;token=TL_ECC256;id=%55 > %34%65%38%63%66%65%35%64%61%33%66%30%62%33%33;object=KL_ECC256;type=pri > vate;pin-value=userpin" vpn.com
That's using it via PKCS#11. Can you just use the '-----BEGIN TSS2 PRIVATE KEY-----' PEM file instead? Isn't that what you were using with OpenConnect?
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ openconnect-devel mailing list openconnect-devel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/openconnect-devel