I wonder if there is any TLS library that actually does certificate verification properly...