Judging from the ns_param variable names, I think you are using an older version of nsopenssl. I recommend that you go to Scott Goodwin's site at www.scottg.net, where you will find good documentation as well as nsopenssl downloads. The latest version has a trace feature that can help you figure out what is going on - though I never used earlier versions, and perhaps they did too.
