diff -Naur openconnect-7.08.orig/openssl-dtls.c openconnect-7.08/openssl-dtls.c
--- openconnect-7.08.orig/openssl-dtls.c	2016-12-06 05:03:51.000000000 -0800
+++ openconnect-7.08/openssl-dtls.c	2017-02-01 13:35:52.315398332 -0800
@@ -100,8 +100,8 @@
 	}
 #else
 	/* OpenSSL <= 1.0.2 only supports CBC ciphers with PSK */
-	ivlen = EVP_CIPHER_iv_length(EVP_CIPHER_CTX_cipher(vpninfo->dtls_ssl->enc_write_ctx));
-	maclen = EVP_MD_CTX_size(vpninfo->dtls_ssl->write_hash);
+	ivlen = EVP_CIPHER_iv_length(EVP_CIPHER_CTX_cipher(vpninfo->dtls_ssl->enc_read_ctx));
+	maclen = EVP_MD_CTX_size(vpninfo->dtls_ssl->read_hash);
 	blocksize = ivlen;
 	pad = 1;
 #endif