> The questions is I can't find the right APIs for Path Discovery. Does OpenSSL support Path Discovery(automatically locate/download the intermediate certs CRLs) and verify the target cert? No it does not automatically go out and fetch certificates. It's hard to do that securely. I don't know about other TLS implementations.