openssl_callback_ignore_crls
X509_STORE_set_verify_cb(store, openssl_callback_ignore_crls);
static int openssl_callback_ignore_crls (int, X509_STORE_CTX *);