SSL cert verify TCL error?

How about something like this ...

when HTTP_REQUEST {   
       if {[SSL::cert count] == 0} {       
           reject   
       } else {   
           set subject [X509::subject [SSL::cert 0 ]]   
           if { [matchclass $subject contains $::merlin] } {   
              use pool test-sun    
           }   
       }   
   }

Alternatively you could modify your CLIENTSSL_HANDSHAKE to look like this ...

when CLIENTSSL_HANDSHAKE {    
       if {[SSL::cert count] > 0} {       
           set cert [SSL::cert 0 ]   
       }    
   }

I am still a little baffled as to why "info exists" failed. I will do some testing tomorrow to try and find out why.