[OpenSSL_jll] Set SSL_CERT_FILE if necessary

Author: giordano

doc/Manifest.toml

@@ -172,7 +172,7 @@ uuid = "ca575930-c2e3-43a9-ace4-1e988b2c1908"
 version = "1.2.0"
 
 [[deps.OpenSSL_jll]]
-deps = ["Artifacts", "Libdl"]
+deps = ["Artifacts", "Libdl", "NetworkOptions"]
 uuid = "458c3c95-2e84-50aa-8efc-19380b2a3a95"
 version = "3.0.13+1"
 

stdlib/OpenSSL_jll/Project.toml

@@ -5,6 +5,7 @@ version = "3.0.13+1"
 [deps]
 Libdl = "8f399da3-3557-5675-b5ff-fb832c97cbdb"
 Artifacts = "56f22d72-fd6d-98f1-02f0-08ddc0907c33"
+NetworkOptions = "ca575930-c2e3-43a9-ace4-1e988b2c1908"
 
 [compat]
 julia = "1.6"

stdlib/OpenSSL_jll/src/OpenSSL_jll.jl

@@ -4,6 +4,7 @@
 
 baremodule OpenSSL_jll
 using Base, Libdl, Base.BinaryPlatforms
+using NetworkOptions: ca_roots
 
 const PATH_list = String[]
 const LIBPATH_list = String[]
@@ -43,6 +44,12 @@ function __init__()
     global artifact_dir = dirname(Sys.BINDIR)
     LIBPATH[] = dirname(libssl_path)
     push!(LIBPATH_list, LIBPATH[])
+
+    # If not already done, set the environment variable `SSL_CERT_FILE` when necessary.
+    cert_loc = ca_roots()
+    if cert_loc isa String
+        get!(ENV, "SSL_CERT_FILE", cert_loc)
+    end
 end
 
 # JLLWrappers API compatibility shims.  Note that not all of these will really make sense.