Whilst not relevant to the general thread, I have solved the SSL certificate problem, by using the guide available here: http://www.dylanbeattie.net/docs/openssl_iis_ssl_howto.html[^] which seems to work for generating a CA and signing a key using xp pro sp3, IIS 5.1 and openssl 0.9.8k. Thought I'd link it in case this thread shows up from a search for CA problems or somesuch. Disclaimer: I have not had time to look into the security implications of this approach, and don't know if there are any problems with following it. Don't use this on a publically accessible machine unless you know what you are doing. I'm only using it for a test certificate.