I was looking at this bug report. Could it be that the problem here is the 16kb handshake DoS limit? It looks like the handshake is really big when ca-certificates was installed, and I think the 'Error in the push function.' error message is consistent with that problem as well (in older gnutls versions, newer versions has a better error code).
Newer versions of gnutls should have a higher DoS limit that fixes this. So it may actually not be a OE problem, but a gnutls problem that has been fixed. I can't find anywhere the information about which gnutls version was used though. So please try latest gnutls/exim versions and check whether you really need to disable client cert requests for OE to work. /Simon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]