And indeed openconnect fails too:
$ openconnect -c tests/certs/ec-cert.pem -k tests/certs/ec-key-pkcs8-pbes2-sha1.pem auth.startssl.com
It doesn't show up in the openconnect 'make check' because adding '--key-password password' to the command line actually fixes it; it's something to do with the password callback or decryption attempt loop.
And indeed openconnect fails too:
$ openconnect -c tests/certs/ ec-cert. pem -k tests/certs/ ec-key- pkcs8-pbes2- sha1.pem auth.startssl.com
It doesn't show up in the openconnect 'make check' because adding '--key-password password' to the command line actually fixes it; it's something to do with the password callback or decryption attempt loop.