Could you add the setting of a credential cache through kssl_ctx_setstring as it is possible for KSSL_KEYTAB and use the value in kssl_tgt_is_available and kssl_cget_tkt by changing it as indicated below:
if ((krb5rc = krb5_cc_default(krb5context, &krb5ccdef)) != 0) goto err; to if (kssl_ctx->cred_cache) { if ((krb5rc = krb5_cc_resolve(krb5context, kssl_ctx->cred_cache, &krb5ccdef)) != 0) goto err; } else { if ((krb5rc = krb5_cc_default(krb5context, &krb5ccdef)) != 0) goto err; } Thank you Markus ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]