x509_certify
if (!x509_certify(ctx, cfg.CAfile, cfg.digest,
static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,