> > The first question I would like to get an answer for is: Which certificate > is > needed to sign the client certificate, the CA certificate or the server > certificate?
It's nonsense, that the server certificate signs the client certificate... it must be signed by the ca certificate. Sebastian -- Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
