OpenSSL: Fix ca_cert_verify for TPM