pcgod: Nope, sorry... It either doesn't work at all with the error (The root certificate of the certificate chain is self-signed, and untrusted (10)) or if i disable this error it allows login with both a certs from "my" CA and any other PKCS12 certificate which provides its own CA client-side.
I don't get the error, though... The root certificate (eg. CA) is self-signed by design, isn't it?