SSL_CTX_get0_param
X509_VERIFY_PARAM *SSL_CTX_get0_param(SSL_CTX *ctx);
X509_VERIFY_PARAM_set_flags(SSL_CTX_get0_param(ssl_ctx),