ssl_cal_path is actually ssl_ca_file

Also slightly improved code layout