sk_X509_dup
untrusted = sk_X509_dup(bs->certs);
if (!(ctx->certs = sk_X509_dup(certs))) {
ret = sk_X509_dup(chain);
if (!ctx->chain || !(chain = sk_X509_dup(ctx->chain)))
(sktmp = sk_X509_dup(ctx->untrusted)) == NULL) {