rself. One such source is the Curl project. See the page <a href="https://curl.se/docs/caextract.html">https://curl.se/docs/caextract.html</a> where you can download trusted certificates in a single file. Rename the file to &quot;cert.pem&quot; and store it directly in <b>OPENSSLDIR</b>. For example if <b>OPENSSLDIR</b> is &quot;/usr/local/ssl&quot;, then save it as &quot;/usr/local/ssl/cert.pem&quot;.</p>

<p>You can also use environment variables to override the default location that OpenSSL will look for