SSL_SECOP_CA_KEY
#define SSL_SECOP_PEER_CA_KEY (SSL_SECOP_CA_KEY | SSL_SECOP_PEER)
operation = SSL_SECOP_CA_KEY;