I noticed the clnt_check variable was never set, which caused ClientCert
3 to always result in a "bad certificate" error.

Patch:

diff -Nur Pound-2.0.3/config.c Pound-2.0.3-new/config.c
--- Pound-2.0.3/config.c        2006-03-15 10:08:52.000000000 -0700
+++ Pound-2.0.3-new/config.c    2006-03-25 01:20:20.000000000 -0700
(at)(at) -875,7 +875,8 (at)(at)
             }
             has_cert = 1;
         } else if(!regexec(&ClientCert, lin, 4, matches, 0)) {
-            switch(atoi(lin + matches[1].rm_so)) {
+            res->clnt_check = atoi(lin + matches[1].rm_so);
+            switch(res->clnt_check) {
             case 0:
                 /* don't ask */
                 SSL_CTX_set_verify(res->ctx, SSL_VERIFY_NONE, NULL);

On Sat, 2006-03-25 at 01:41 -0700, Sean Gabriel Heacock wrote:[...]

Thanks Sean - this goes into the next release.[...]