Supply SSL_CA_FILE when validating OpenID server SSL certificate