https://rbwilson.ca/how-to-verify-certificates-with-openssl/
Anonymous
Separate policy from mechanism, separate interfaces from engines.
