We have some old certificates that does not comply with the default minimum security level in openssl 3. Loading these certificates is rejected by openssl 3.
We have then tried to set SSLOptions.CipherList = 'DEFAULT:@SECLEVEL=0', but that does not work either.
We have then modified the sgcIdSSLOpenSSL.pas to call SSL_CTX_set_cipher_list prior to loading the certificates and now it works.
This looks like an error in sgcIdSSLOpenSSL.pas, since the CipherList content is also used to set the security level which influences the loading of certificates and should be corrected.