Shortened function names (conf prefix removed). Certificate verification changed: instead of directly calling a verifier function, the process is done by a verification callback registered into the OpenSSL context - this was needed for implementing *-untrusted peer-verify()