I patched ssl_engine_kernel.c to realize an OCSP responder function that check cert status on ldap v2 directory. I am sorry to be a pain in the neck (or lower down :), but you did not. Your code does not do OCSP. OCSP is a status query protocol defined by the IETF. You added "cert lookup" to mod_ssl. Many people will find this useful, but it is not adding OCSP to Apache. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]