SSL_BUILD_CHAIN_FLAG_UNTRUSTED
SSL_BUILD_CHAIN_FLAG_UNTRUSTED | SSL_BUILD_CHAIN_FLAG_NO_ROOT)) {
if (flags & SSL_BUILD_CHAIN_FLAG_UNTRUSTED)