X509_V_FLAG_TRUSTED_FIRST
X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_TRUSTED_FIRST);
if (search == 0 || (ctx->param->flags & X509_V_FLAG_TRUSTED_FIRST) != 0)
X509_V_FLAG_TRUSTED_FIRST, /* flags */