Here is my experiences with Netscape 6 and what I think is a bug in their code/ implementation etc. 1. Created a new CA. 2. Downloaded CA into IE 5.5 and NS 6.0 : no problems 3. Created web cert and implemented into web server IE 5.5 and NS 6.0 both like this 4. created personal cert for client authentication 5. created the pkcs12 file (jeff.p12) 6. imported jeff.p12 into IE 5.5 no problem 7. imported jeff.p12 into NS 6.0 problem. NS 6.0 accepts password but doesn't import it. OK then 8. Exported Personal Cert from IE 5.5 into a pkcs12 file. (jeff2.p12) 9. Imported jeff2.p12 into NS 6.0: No Problem. 10 Surfed to web page with both browsers. Results: IE No prob asks for cert and is happy NS Prob. Either the psm crashes or I don't have a cert to choose 11 Download Netscape Communicator 4.76? 12 imported jeff.p12 no probs 13 surfed to site and chose cert no probs. So: I'm thinking that the code in Netscape 6.0 is a little buggy. Due to the crashes of the psm code and the refusal to import jeff.p12. I haven't tested jeff2.p12 in Communicator yet and I think I should just to see what happens. Hopefully this helps the next person that this happens to so that they can maybe debug this further. Has anyone else on this list experienced the same problems that I have? Just for mention I am useing the lastest openssl 0.9.6. But not the cvs version or anything like that. Personally I don't think that it is really openssl's problem althoe NS 6.0 does import the IE exported p12. Thank you OpenSSL team for providing this excellent tool. Jeff Ritchie ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]