Just a FYI, The certificates generated with a version of the script before Matt's fix on Friday use a bogus x509 v4 option and will fail interop tests. git pull and regenerate the certificates using: cd testing/x509 ./dist_certs.py Paul