Revise OpenSSL handling when not verifying cert issuer