try setting both CAINFO and CAPATH

Author: jswhit

config.sh

@@ -47,7 +47,7 @@ function build_curl {
     if [ -n "$IS_MACOS" ]; then
          flags="$flags --with-secure-transport"
     else  # manylinux
-         flags="$flags --with-openssl=${BUILD_PREFIX} --without-ca-bundle --without-ca-path"
+         flags="$flags --with-openssl=${BUILD_PREFIX}"
     #    yum_install perl-IPC-Cmd # needed for openssl 3+
     #    yum_install perl-Pod-Html
          build_openssl
@@ -292,12 +292,13 @@ function run_tests {
     URL='https://icdc.cen.uni-hamburg.de/thredds/dodsC/ftpthredds/hamtide/m2.hamtide11a.nc'
     if [ -z "$IS_MACOS" ]; then  # only needed for Linux
        # these should work, but don't
-       #echo "HTTP.SSL.CAINFO=/etc/ssl/certs/ca-certificates.crt" > $HOME/.ncrc
+       echo "HTTP.SSL.CAINFO=/etc/ssl/certs/ca-certificates.crt" > $HOME/.ncrc
+       echo "HTTP.SSL.CAPATH=/etc/ssl/certs"                    >> $HOME/.ncrc
        #export CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
-       echo "cacert=/etc/ssl/certs/ca-certificates.crt" > $HOME/.curlrc
+       #echo "cacert=/etc/ssl/certs/ca-certificates.crt" > $HOME/.curlrc
        # this works
-       #mkdir -p /etc/pki/tls/certs
-       #ln -s /etc/ssl/certs/ca-certificates.crt /etc/pki/tls/certs/ca-bundle.crt
+       mkdir -p /etc/pki/tls/certs
+       ln -s /etc/ssl/certs/ca-certificates.crt /etc/pki/tls/certs/ca-bundle.crt
     fi
     python -c "from netCDF4 import Dataset; nc=Dataset(\"${URL}\"); print(nc)"
 }