curl: changed to not set a default bundle, and set to use /etc/ssl/certs as default CApath

network/curl/curl.conf

@@ -17,3 +17,11 @@
 if [ "$SDECFG_STATIC" = "1" ] ; then
 	var_insert confopt " " "--disable-shared"
 fi
+
+# we don't have a bundle, it can't be disabled on runtime
+# and if it's empty it fails to verify anything regardless
+# the capath
+var_append extraconfopt ' ' '--without-ca-bundle'
+if pkginstalled openssl; then
+	var_append extraconfopt ' ' '--with-ca-path=/etc/ssl/certs'
+fi