Comment 2 for bug 264956

I've added support for a second optional argument to load_verify_locations and added a separate set_default_verify_paths method based on your patch. I think together these changes expose all the functionality you're interested in. I took this approach because I prefer to mimic the OpenSSL API as closely as possible. The code is still in the branch in the "Related branches" section, not trunk. Please let me know what you think, and hopefully I can merge this to trunk soon.