at the
peer certificate is signed by one of the root certificates in the CA
database, but it does not validate that the certificate actually
matches the host name we are trying to connect to. (With other backends,
the host name is validated as well.)
</p>
<p>This is disabled by default since it requires a CA database to be
provided by the caller in many cases.
</p>
</dd>
<dt>&lsquo;<samp>cert_file, cert=<var>filename</var></samp>&rsquo;</dt>
<dd><p>A file containing a certificate to use in the handshake wit