tell openssl to look for the ca-bundle.crt in our common location