• ssl_config handling
• Current Status
• Alternate Approach
• Open Issues / Observations
• Daniel's feedback on the three issues
• certverifyresult
• not use data->ssl.primary during handshake
• setopt.c setting variables in 'conn'