verify_callback is called twice on a self-signed certificate from the server

[BORANNA,NAGARAJA (HP-Cupertino,ex1)]

Hi,

In my ssl client program I set 

    SSL_CTX_set_verify(sslContext, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE,
verify_callback);

During handshake, Server sends a self-signed certificate to the Client.
Clients verify_callback gets called two times.  My verify_callback must
prompt the user to accept a new certificate that is not in the clients trust
store.

Why does the verify_callback getting called twice? When should the
verify_callback prompt the user?

Appreciate any help on this.

Thanks,
Nag
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]