The documentation for -cadir should include the filename format required (from SSL_CTX_load_verify_locations(3)) for certificates when using cadir