Recent OpenSSL changes and CA certs

[Aaron Madlon-Kay]

Forget all that stuff I mentioned about rbenv and ruby-build. I can
reproduce this with the ruby30 port:

% /opt/local/bin/ruby3.0 -r net/http -e
'Net::HTTP.get(URI("https://www.apple.com"))'
/opt/local/lib/ruby3.0/3.0.0/net/protocol.rb:46:in `connect_nonblock':
SSL_connect returned=1 errno=0 state=error: certificate verify failed
(unable to get local issuer certificate) (OpenSSL::SSL::SSLError)
        from /opt/local/lib/ruby3.0/3.0.0/net/protocol.rb:46:in
`ssl_socket_connect'
        from /opt/local/lib/ruby3.0/3.0.0/net/http.rb:1038:in `connect'
        from /opt/local/lib/ruby3.0/3.0.0/net/http.rb:970:in `do_start'
        from /opt/local/lib/ruby3.0/3.0.0/net/http.rb:959:in `start'
        from /opt/local/lib/ruby3.0/3.0.0/net/http.rb:621:in `start'
        from /opt/local/lib/ruby3.0/3.0.0/net/http.rb:496:in `get_response'
        from /opt/local/lib/ruby3.0/3.0.0/net/http.rb:467:in `get'
        from -e:1:in `<main>'

When working correctly, the above command will exit with no message.

-Aaron