Install and use our own (up-to-date) certificate files

gitlab/functions.sh

@@ -283,3 +283,9 @@ if [ -z "${CI_BUILD_TAG}" ]; then
 else
   log_info "Building tag, not setting BOB_DOCUMENTATION_SERVER"
 fi
+
+# sets up certificates for curl and openssl
+CURL_CA_BUNDLE="$(dirname ${0})/cacert.pem"
+export_env CURL_CA_BUNDLE
+SSL_CERT_FILE="${CURL_CA_BUNDLE}"
+export_env SSL_CERT_FILE

gitlab/install.sh

@@ -57,6 +57,7 @@ get_exec() {
 
 
 run_cmd mkdir -pv ${1}
+get_script ${1} cacert.pem
 get_script ${1} functions.sh
 get_exec ${1} install.sh
 for stage in "build" "test" "docs" "wheels" "deploy"; do