[OpenSSL_jll] Set SSL_CERT_FILE if necessary

Author: giordano

doc/Manifest.toml

@@ -172,7 +172,7 @@ uuid = "ca575930-c2e3-43a9-ace4-1e988b2c1908"
 version = "1.2.0"
 
 [[deps.OpenSSL_jll]]
-deps = ["Artifacts", "Libdl"]
+deps = ["Artifacts", "Libdl", "MozillaCACerts_jll"]
 uuid = "458c3c95-2e84-50aa-8efc-19380b2a3a95"
 version = "3.0.13+1"
 

stdlib/OpenSSL_jll/Project.toml

@@ -5,6 +5,7 @@ version = "3.0.13+1"
 [deps]
 Libdl = "8f399da3-3557-5675-b5ff-fb832c97cbdb"
 Artifacts = "56f22d72-fd6d-98f1-02f0-08ddc0907c33"
+MozillaCACerts_jll = "14a3606d-f60d-562e-9121-12d972cd8159"
 
 [compat]
 julia = "1.6"

stdlib/OpenSSL_jll/src/OpenSSL_jll.jl

@@ -4,6 +4,7 @@
 
 baremodule OpenSSL_jll
 using Base, Libdl, Base.BinaryPlatforms
+using MozillaCACerts_jll: cacert
 
 const PATH_list = String[]
 const LIBPATH_list = String[]
@@ -43,6 +44,9 @@ function __init__()
     global artifact_dir = dirname(Sys.BINDIR)
     LIBPATH[] = dirname(libssl_path)
     push!(LIBPATH_list, LIBPATH[])
+
+    # If not already done, set the environment variable `SSL_CERT_FILE`.
+    get!(ENV, "SSL_CERT_FILE", cacert)
 end
 
 # JLLWrappers API compatibility shims.  Note that not all of these will really make sense.