Gabba Gabba Hey! http://developer.entrust.com You can get a developer addition of our PKI at the above url, including LDAP server so you can test retrieval of CRLs. If you look hard enough you can even get an IKE toolkit which includes support for both signature modes. Bye. ---- Greg Carter, Entrust Technologies greg.carter@entrust.com