match_certfile
if (match_certfile(cur_cert, cred->data))
else if (match_certfile(cur_cert, conn_info->certfile))
bool match_certfile(const X509 *, const char *);