I've added in the cvs' src/ directory a test program which checks servers for several parameters (few at the moment). This helped me identify some problems with several implementations. Ie. www.verisign.com seem to work fine if we don't add any extension in the Client Hello. -- Nikos Mavroyanopoulos mailto:nmav at gnutls.org