[cacert] Use certificates provided by certifi

bob/devtools/constants.py

@@ -25,8 +25,7 @@ CONDA_RECIPE_APPEND = pkg_resources.resource_filename(__name__,
 SERVER = 'http://www.idiap.ch'
 '''This is the default server use use to store data and build artifacts'''
 
-CACERT = pkg_resources.resource_filename(__name__,
-    os.path.join('data', 'cacert.pem'))
+CACERT = __import__('certifi').where()
 '''We keep a copy of the CA certificates we trust here
 
    To update this file use: ``curl --remote-name --time-cond cacert.pem https://curl.haxx.se/ca/cacert.pem``

bob/devtools/scripts/bdt.py

@@ -58,3 +58,4 @@ def main():
     from ..constants import CACERT, set_environment
 
     set_environment('SSL_CERT_FILE', CACERT, os.environ)
+    set_environment('REQUESTS_CA_BUNDLE', CACERT, os.environ)

conda/meta.yaml

@@ -35,6 +35,7 @@ requirements:
     - click-plugins
     - conda=4
     - conda-build=3
+    - certifi
     - pytz
     - python-dateutil
     - gitpython

setup.py

@@ -10,6 +10,7 @@ requires = [
     'click',
     'click-plugins',
     'conda-build',
+    'certifi',
     'requests',
     'gitpython',
     'python-gitlab',