Thnanks for the patch. Sorry it took so long to reply, but its' been five years and having the openssl runtime connect out to servers (ocsp even) is not supported. -- Rich Salz, OpenSSL dev team; rsalz at openssl.org