X509_STORE_CTX_new and X509_verify_cert