> 1) and 2) above work fine with pkcs#12 based keys, but as soon as I > switch to the nssdb-resident equivalent I am unsuccessful. Can you run 3rd test under gdb and get a stack trace? Aleksey