OpenSSL currently lacks a certificate bundle. It looks for it in $out/ssl/cert.pem. There is no general environment variable to override this location, but some applications have one (e.g. $CURL_CA_BUNDLE and $GIT_SSL_CAINFO).

We could symlink OpenSSL’s $out/ssl/cert.pem to /etc/ssl/certs/ca-bundle.crt.

Submitted by Eelco Dolstra on 7 September 2011 at 20:23