Thanks Mathias, I'll try changing all three. Openacs.org burped. Am posting the following I meant to post a few hours ago.:
Changing the following nsopenssl configuration[1] parameters (and then restarting aolserver) did not change symptoms. Interestingly, SockServerPeerVerifyDepth (is listed twice) but no SockClientPeerVerifyDepth.
ns_param SockServerPeerVerify false
ns_param SockClientPeerVerify false
ns_param SockServerPeerVerifyDepth 0
1. http://www.scottg.net/webtools/aolserver/modules/nsopenssl/configuration/
.