X509_TRUST_DO_SS_COMPAT
flags |= X509_TRUST_DO_SS_COMPAT | X509_TRUST_OK_ANY_EKU;
flags &= ~(X509_TRUST_DO_SS_COMPAT | X509_TRUST_OK_ANY_EKU);
if ((flags & X509_TRUST_DO_SS_COMPAT) == 0)
flags | X509_TRUST_DO_SS_COMPAT);