wolfssl prior to 3.2.0 does not properly authorize CA certificate for signing other certificates.
wolfssl wolfssl