 I have the same issue. For instance the following command

    openssl s_client -connect -CApath

raises the error

    depth=0 CN =
    verify error:num=20:unable to get local issuer certificate
    verify return:1
    depth=0 CN =
    verify error:num=21:unable to verify the first certificate
    verify return:1

This makes trouble with some more pedantic apps that try to access the webpage via https.