Does `CURLOPT_SSL_VERIFYHOST` also need to be set like `CURLOPT_SSL_VERIFYPEER `?
And could you pull the latest codes since this PR can't be automatically merged.