Hi, It seems that configuration A wants to do GCM, but then also allows non GCM suites. It's my understanding that you really want GCM. You can get that by adding +AESGCM to the cipher string. Kurt