I know know lots and lots about client authentication and certificates. Thanks everyone for your help! Now: there's one big thing that I don't understand. If I am going to be building an https client that will authenticate itself with a certificate of some kind, does that client need to have access to the private key corresponding to the certificate? I know that may be a really dumb question, but it has some big implications for my little project. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]