hi, I note you are not using the root.crt file for the CA_file. I've found that using the pem often causes issues depending on how the cert was generated. also, did you use the XP extensions with your certificate as per the docs?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

