Use certifi certs for buck download

Author: GregoryComer

tools/cmake/resolve_buck.py

@@ -7,8 +7,10 @@
 # LICENSE file in the root directory of this source tree.
 
 import argparse
+import certifi
 import os
 import platform
+import ssl
 import stat
 import sys
 import urllib.request
@@ -205,15 +207,15 @@ def resolve_buck2(args: argparse.Namespace) -> Union[str, int]:
 
             try:
                 print(f"Downloading buck2 from {buck2_archive_url}...", file=sys.stderr)
-                archive_file, _ = urllib.request.urlretrieve(buck2_archive_url)
+                ssl_context = ssl.create_default_context(cafile=certifi.where())
 
-                # Extract and chmod.
-                with open(archive_file, "rb") as f:
-                    data = f.read()
+                with urllib.request.urlopen(buck2_archive_url) as request:
+                    # Extract and chmod.
+                    data = request.read()
                     decompressed_bytes = zstd.decompress(data)
 
-                with open(buck2_local_path, "wb") as f:
-                    f.write(decompressed_bytes)
+                    with open(buck2_local_path, "wb") as f:
+                        f.write(decompressed_bytes)
 
                 file_stat = os.stat(buck2_local_path)
                 os.chmod(buck2_local_path, file_stat.st_mode | stat.S_IEXEC)