Thanks Eric,
Sorry, maybe I did not explain the issue correctly. Everything works on the server side and the packages get imported on the client side. When connecting however, the client fails to validate the server certificate because it doesn’t infer the CA certificate from the configuration.
I just tested with a configuration without a password and the resulting configuration included the CA certificate, but this could be the case even in the case the private key in the PKCS12 file is password protected - I’ll try to find out where in the code this happens and I’ll try to submit a patch for it.