This bug stops client authentication from working. diff -r -C 1 SSLeay-0.5.2a/ssl/ssl_clnt.c SSLeay-0.5.2a+/ssl/ssl_clnt.c *** SSLeay-0.5.2a/ssl/ssl_clnt.c Fri May 3 18:55:45 1996 --- SSLeay-0.5.2a+/ssl/ssl_clnt.c Fri May 10 16:33:07 1996 *************** *** 619,621 **** EVP_SignUpdate(&ctx,cert_ch,(unsigned int)cert_ch_len); ! n=i2d_X509(s->cert->x509,&p); EVP_SignUpdate(&ctx,buf,(unsigned int)n); --- 619,621 ---- EVP_SignUpdate(&ctx,cert_ch,(unsigned int)cert_ch_len); ! n=i2d_X509(s->session->cert->x509,&p); EVP_SignUpdate(&ctx,buf,(unsigned int)n); diff -r -C 1 SSLeay-0.5.2a/ssl/ssl_srvr.c SSLeay-0.5.2a+/ssl/ssl_srvr.c *** SSLeay-0.5.2a/ssl/ssl_srvr.c Fri May 3 18:55:47 1996 --- SSLeay-0.5.2a+/ssl/ssl_srvr.c Fri May 10 16:35:55 1996 *************** *** 817,819 **** p2=buf2; ! i=i2d_X509(x509,&p2); EVP_VerifyUpdate(&ctx,buf2,(unsigned int)i); --- 817,819 ---- p2=buf2; ! i=i2d_X509(s->session->cert->x509,&p2); EVP_VerifyUpdate(&ctx,buf2,(unsigned int)i); .