hello again!! =) when i run "make client.pem", according the file certs/README, have this error: [root@radius certs]# make client.pem openssl req -new -out client.csr -keyout client.key -config ./client.cnf Generating a 2048 bit RSA private key ......................................................................................................................................................................................................+++ ...........................+++ writing new private key to 'client.key' ----- openssl ca -batch -keyfile server.key -cert server.crt -in client.csr -key `grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf unable to load CA private key 24500:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:461: 24500:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425: make: *** [client.crt] Error 1 some know why? many thanks!