HX509_CERTS_UNPROTECT_ALL
if (ret && (pem_ctx->flags & HX509_CERTS_UNPROTECT_ALL)) {
flags |= HX509_CERTS_UNPROTECT_ALL;