Please ignore my previous e-mail, the problem is located in X509_STORE_CTX_init()
The memset(&(ctx->ex_data),0,sizeof(CRYPTO_EX_DATA)) that was commented out needs to be restored due to the use of OPENSSL_cleanse() on that data structure. In previous releases this data structure would have been zero'd out. Now it contains random data in pointer fields and therefore must be zero'd before the call to CRYPTO_new_ex_data(). Thanks. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]