Dimitri Papadopoulos Orfanos

France for example, but these are general "recommendations" from the data protection authority (CNIL) more than regulatory rules: [L’authentification par mot de passe : longueur, complexité, mesures complémentaires](https://www.cnil.fr/fr/authentification-par-mot-de-passe-les-mesures-de-securite-elementaires) Companies will...

In Germany: * [BSI TR-03148 Sichere Breitband Router](https://www.bsi.bund.de/DE/Publikationen/TechnischeRichtlinien/tr03148/tr03148_node.html) / [CCC und OpenWrt: Technische Richtlinie des BSI zu sicheren Routern unzureichend](https://www.ccc.de/de/updates/2018/risikorouter) * [Hinweise zum Umgang mit Passwörtern](https://www.baden-wuerttemberg.datenschutz.de/hinweise-zum-umgang-mit-passwoertern/) but then this document...

Isn't this a duplicate of #40?

Perhaps this environment variable could be set by the script itself, but it would be nice to set it only when required. Do you have any clue how to detect...

Also, I suppose the following might help as per https://github.com/python/cpython/pull/27776#issuecomment-1080504060: ```python ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH) ctx.options |= 0x4 ``` According to https://github.com/psf/requests/issues/2118#issuecomment-272377938: > You can pass SSLContext objects using TransportAdapters as...

@Lalufu This ticket was initially about Ubuntu 22.04. There may be other reasons for the failure on Fedora 36 – either different or additional reasons. Without a log or at...

@Lalufu Does https://github.com/dlenski/gp-saml-gui/issues/30#issuecomment-898660223 help in your case? ```sh sudo update-crypto-policies --set LEGACY ```

> The config change needs to be made at a slightly different place, but using `Options = UnsafeLegacyRenegotiation` does fix it once you've found the right file to put it...

Perhaps the workarounds could be documented in the [README](https://github.com/dlenski/gp-saml-gui/blob/master/README.md) or a wiki page, in this project or the OpenConnect documentation: * `openconnect`: OpenConnect is usually linked with GnuTLS nowadays, but...

I'm on Ubuntu 22.04. Which exact issue can I reproduce with `vpp.itunes.apple.com` and how?