OPENID_CA_FILE defaults to nil