Hi, I have some questions on the verification callback function. By the way, I'm using the SSL_VERIFY_PEER mode. 1. Is it best practice to put all the certificate checks in this callback function? 2. Is it so that the number of times this function is called is equal to the verification depth used? 3. If so, how do I get to know the verification depth at runtime? I'll be more specific on this : if I wanted to add an extra check only for the last certificate in the chain (that of the client), how would I do this? Hope my questions make sense. Anyways, much thanx in advance, Robin ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]