When using client certificates, how does SSL_accept validate the provided certificate? If verify_callback is used, is the client certificate validated before the callback is called? -- Doug