Heyho, I use the ssl-strict setting with surf. When browsing to https://wiki.gentoo.org I get „SSL handshake failed“. However I checked, that the root ca (DigiCert High Assurance EV Root CA) is contained in /etc/ssl/certs/ca-certificates.crt. I also use this file as cafile in config.h. When calling openssl manually it also works:
$ openssl s_client -connect wiki.gentoo.org:443 -verify 10 … Verify return code: 0 (ok) Is there a possibility to get more debug info? I did not find any relevant logs or verbosity switches, that could help. --Markus