At 10:19 AM 12/22/2005, Ralf Haferkamp wrote: >I am not sure if I understand your question. My orignal idea was to do >it without any addtional API and hide the non-blocking SSL-handshake >completely inside the ldap_int_tls_connect() function. Then that the only thing the API could do in face of a timeout would likely be to abruptly close the connection and void the handle.