Well, got that one solved. They don't bother to mention it when they talk about the callback, but there is also a "switch"
gsk_attribute_set_enum(env_handle, GSK_CERT_DIAG_INFO, GSK_CERT_DIAG_INFO_SUCCESS_OR_FAILURE) that tells System SSL whether to call you on successes, failures or both. The default is failures only, and that accounts for what I am seeing. Charles ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
