Security fix in CA certificate chain verification (better check untrusted CA certificates from peer, more strict error handling).