Version 3. * Sat Oct 18 2008 TAKAHASHI Tamotsu <ttakah@xxxxxxxxxxxxxxxxx> > +static STACK_OF(X509) *SslSessionCerts = NULL; > +#define CACHE_TRUSTED(c) \ > + if (!SslSessionCerts) \ > + SslSessionCerts = sk_new_null(); \ > + sk_X509_push (SslSessionCerts, c); \ This must be sk_X509_push (SslSessionCerts, X509_dup(c)); \ because the cert will be freed when the connection is closed. -- tamo