anchor.diff:                                         {cacertfile, CA},
                                          {certfile, Cert}, {keyfile, Key}]}]).
   
  -start_server(openssl, PeerCA, OwnCa, Cert, Key, _Config) ->
  -    CA = new_openssl_ca("openssl_server_ca", PeerCA, OwnCa),
  +
  +start_server(openssl, PeerCA, OwnCa, Cert, Key, Config) ->
  +    PrivDir = proplists:get_value(priv_dir, Config),
  +    CA = new_openssl_ca(filename:join(PrivDir,"openssl_server_ca.pem"), PeerCA, OwnCa),
       Port = ssl_test_lib:inet_port(node()),
       Version = tls_record:protocol_version(tls_record:highest_protocol_version([])),
       Exe = "openssl",
  
positive.code:     Error = {error, {tls_alert, "insufficient security"}},
      ssl_test_lib:check_result(Server, Error, Client, Error).
  
  start_client(openssl, Port, PeerCA, OwnCa, Cert, Key, _Config) ->
      CA = new_openssl_ca("openssl_client_ca", PeerCA, OwnCa),
      Version = tls_record:protocol_version(tls_record:highest_protocol_version([])),
      Exe = "openssl",
      Args = ["s_client", "-verify", "2", "-port", integer_to_list(Port),
  
negative.code: 			       {options, [{verify, verify_peer}, 
  					  {cacertfile, CA},
  					  {certfile, Cert}, {keyfile, Key}]}]).
  
  
  start_client_ecc(erlang, Port, PeerCA, OwnCa, Cert, Key, Expect, ECCOpts, Config) ->
      CA = new_ca("erlang_client_ca", PeerCA, OwnCa),
  