I've added support for the DHE_RSA ciphersuites to gnutls (it's in the cvs). This means that sign only certificates may also be used. I will now add an option to replace the default primes and generators and make a release in a few days. You may test the DHE_RSA ciphersuites by getting the source files from the cvs. -- Nikos Mavroyanopoulos mailto:nmav@hellug.gr