SSL_check_chain fix