To verify against CA issued certs, we need to work with local CA cert file.

We try /etc/pki/tls/certs/ca-bundle.crt to see if it contains valid CA certificate, before trying to use the peer's cert as self-signed one.