I think you added a challenge passphrase. Generate a new key/cert pair without it or strip out the passphrase following the instructions right here. Also, some folks were working on an nsopenssl HOWTO. Try the search engine and see if they've finished it up.
