http://rt.openssl.org/Ticket/Display.html?id=3621 uses X509_STORE_set_flags(store,X509_V_FLAG_TRUSTED_FIRST);