This is working for me in Wheezy, just need to add the extra parameter. Something like this achieves the requested behavior:
openssl s_client -verify 3 -verify_return_error -CApath /etc/ssl/certs/ -starttls imap -connect mail.example.com:143 This is also documented in the man and in `openssl s_client -h`. So I thinks this bug should be closed. -- Carlos Ramos
