There's clearly only one solution: I'll implement a DWIM keyword in OpenSSL 1.1 Maybe @BEST sorting order. It's hard. You aren't doing people a service by attempting magic. -- Principal Security Engineer, Akamai Technologies IM: rsalz at jabber.me Twitter: RichSalz