set SSL_verify_mode to SSL_VERIFY_PEER, allow overriding ca path