Thanks for a lot of material to read. I'd like to repeat my question about importing CA certificate off-line. I though openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -certfile cacert.pem -out user.p12 would work fine, but it didn't. When I tried to add -chain, it told me that the chain can not be created. I am using self signed certificate. Any help... please? Thank you! ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]