LDAP search using SSL connection

[plancor@xxxxxxxxxxxxxxx]

Using Scott Klement's LDAP search example program (see "Getting error 
'Decoding error' calling LDAP API ldap_get_values()" post from June 2002) 
, I have created a program that retrieves attributes from the LDAP.  It's 
been working nicely for a couple years.  However, now we want to access 
the LDAP using SSL.  I believe there is an external procedure named 
'ldap_ssl_init' that I would want to use to make the connection, but I 
cannot seem to get it to work.  There is only one more parm for the 
ldap_ssl_init than the ldap_init and that is the certlbl parm.  According 
to the IBM documentation, if the LDAP server configuration performs Server 
Authentication, it does not require a client certificate, so set certlbl 
to null. 

I have added the prototype to the ldap_h copy member as such:

     D ldap_ssl_init   PR              *   extproc('ldap_ssl_init')
     D   defhost                       *   value options(*string)
     D   defport                     10I 0 value
     D   certlbl                       *   value options(*string) 

And have changed the ldap_init to ldap_ssl_init as such:
 
     H DFTACTGRP(*NO) ACTGRP(*NEW) BNDDIR('QC2LE')
     H OPTION(*SRCSTMT: *NODEBUGIO) UsrPrf(*Owner)

     D/copy StCTools/source,ldap_h

     D LOGIN_ACCT      C                   'xxxxxx'
     D LOGIN_PASSWD    C                   'yyyyyyyyyy'
     D MY_BASE_DN      C                   
'OU=ABC,DC=ci,DC=thiscity,DC=xx,-
     D                                      DC=us'
     D Host            C                   'CI.THISCITY.XX.US'
     D CertLbl         C                   ''

     D ld              S               *
     D rc              S             10I 0

     D @Msg            S             52A

      /FREE
       @Msg   = *blanks;

       ld = ldap_ssl_init(Host : LDAPS_PORT: CertLbl);
       if ld = *NULL;
         rc = ldap_get_errno(ld);
         @Msg = %str(ldap_err2string(rc));
         return;
       endif;

      /END-FREE 

The return from ldap_ssl_init is always null which causes the 
ldap_get_errono routine to run.  This routine errors out with:

Pointer not set for location referenced. 
The call to ldap_get_e ended in error (C G D F).

Does anyone have an idea of what I am doing incorrectly, or an example of 
how to do it correctly?  Do I need to import the SSL certificate on the 
System i?  Any ideas would be greatly appreciated.