>Thanks. Will a simple change from '1' to 'ok' work?

Yes. To test it I used the tjhCA.pem file on a commercial website. Then it
aborts.

--- curl-7.7.3/lib/ssluse.c Tue Apr 24 23:41:29 2001
+++ curl-7.7.3/lib/ssluse.c Thu Jun 28 12:27:14 2001
@@ -230,7 +230,7 @@
   err_cert=X509_STORE_CTX_get_current_cert(ctx);
   X509_NAME_oneline(X509_get_subject_name(err_cert),buf,256);
 
- return 1;
+ return ok;
 }
 
 #endif
Received on 2001-06-28