PR 2936, etc: Consistently use default cert dir

All apps that have -CApath and -CAfile now are consistent and
call common code to use the specified parameters, or use
the default file/dir if none are specified.