This may be a naive question, but is the pem format so complicated that xmlsec can't provide some translation function for the nss and gnutls engines? -John -- http:// if ile.org/