>Pardon me if I've missed something, but as far as I can tell the server >cert isn't authorised to sign client certs
And where did you get that idea? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
