Well, thanks to Dave Thompson, this silly bug was fixed, his hint to examine the certificate lead me to the path that ended up with me finding that actually the CA in the clients side was being set AFTER its test to see if it had a CA and setting the values if it did, so it never ran the SSL_CTX_load_verify_locations, believing it had no CTX
The logic was all fine, just one line setting the CA done at the wrong place. So, hooray, all of the SSL functionality now works! Thanks -- Michael Simms ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]