Re: not permitted to talk to peer, certificate invalid: no specific reason:

> PS: as a side-note I wonder why certtool does not detect that the wrong
> private key was used - e.g. it could verify the signature after doing
> it. Or am I thinking wrong?

You are right, there should be a check. I'll add it to the todo list
in case someone is interested into implementing it.

regards,
Nikos