By default commands such as "ctest" would not look for certificates
at all: <https://issues.guix.gnu.org/issue/37371>.

This changes CMake such that commands honor SSL_CERT_FILE and SSL_CERT_DIR
as well as /etc/ssl/certs.

--- cmake-3.13.1/Source/cmCurl.cxx	2019-09-10 17:27:36.926907260 +0200
+++ cmake-3.13.1/Source/cmCurl.cxx	2019-09-10 17:52:35.475903919 +0200
@@ -2,11 +2,8 @@
    file Copyright.txt or https://cmake.org/licensing for details.  */
 #include "cmCurl.h"
 
-#if !defined(CMAKE_USE_SYSTEM_CURL) && !defined(_WIN32) &&                    \
-  !defined(__APPLE__) && !defined(CURL_CA_BUNDLE) && !defined(CURL_CA_PATH)
 #  define CMAKE_FIND_CAFILE
 #  include "cmSystemTools.h"
-#endif
 #include "cmStringAlgorithms.h"
 
 // curl versions before 7.21.5 did not provide this error code
@@ -30,6 +27,19 @@
     ::CURLcode res = ::curl_easy_setopt(curl, CURLOPT_CAINFO, cafile);
     check_curl_result(res, "Unable to set TLS/SSL Verify CAINFO: ");
   }
+
+  /* Honor the usual environment variables.  */
+  else if (cmSystemTools::GetEnv("SSL_CERT_FILE", e)) {
+    ::CURLcode res =
+      ::curl_easy_setopt(curl, CURLOPT_CAINFO, e.c_str());
+    check_curl_result(res, "Unable to set TLS/SSL Verify CAINFO: ");
+  }
+  else if (cmSystemTools::GetEnv("SSL_CERT_DIR", e)) {
+    ::CURLcode res =
+      ::curl_easy_setopt(curl, CURLOPT_CAPATH, e.c_str());
+    check_curl_result(res, "Unable to set TLS/SSL Verify CAINFO: ");
+  }
+
 #ifdef CMAKE_FIND_CAFILE
 #  define CMAKE_CAFILE_FEDORA "/etc/pki/tls/certs/ca-bundle.crt"
   else if (cmSystemTools::FileExists(CMAKE_CAFILE_FEDORA, true)) {
uild-aux/compile-all.scm'>
<input type='hidden' name='id' value='a8dd1d2abf06f93c740cfe18038d7b69ad889943'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=a8dd1d2abf06f93c740cfe18038d7b69ad889943'>root</a>/<a href='/guix/log/build-aux?id=a8dd1d2abf06f93c740cfe18038d7b69ad889943'>build-aux</a>/<a href='/guix/log/build-aux/compile-all.scm?id=a8dd1d2abf06f93c740cfe18038d7b69ad889943'>compile-all.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/build-aux/compile-all.scm?id=a8dd1d2abf06f93c740cfe18038d7b69ad889943&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-06-23 23:35:27 +0200'>2021-06-23</span></td><td><a href='/guix/commit/build-aux/compile-all.scm?id=ef82ba9dd94369926eb13325d5e7da4306d23dd7'>build: Makefile splits Scheme compilation in four steps.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/48963&gt;.
Reported by Julien Lepiller &lt;julien@lepiller.eu&gt;.

This reduces peak memory consumption to something less unreasonable.

* Makefile.am (make-go): Depend on 'make-*-go' targets; remove body.
(guile-compilation-rule): New function.
(MODULES_CORE, MODULES_PACKAGES, MODULES_SYSTEM, MODULES_CLI): New
variables.
&lt;top level&gt;: Call 'guile-compilation-rule' 4 times.
* build-aux/compile-all.scm &lt;top level&gt;: Expect "--total" and
"--processed".  Take them into account when displaying progress
reports.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2021-06-18 14:18:06 +0200'>2021-06-18</span></td><td><a href='/guix/commit/build-aux/compile-all.scm?id=003728cfab907be5df1411c5faaf466a2b8d5ba2'>build: Remove Guile 2.2 workaround.</a><span class='msg-avail'>...<span class='msg-tooltip'>* build-aux/compile-all.scm &lt;top level&gt;: Remove Guile 2.2 workaround.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-04-12 00:00:59 +0200'>2020-04-12</span></td><td><a href='/guix/commit/build-aux/compile-all.scm?id=27a1e4fd109f6df9f687958cfead0d3e41e330aa'>build: Cap build parallelism on i686.</a><span class='msg-avail'>...<span class='msg-tooltip'>Works around &lt;https://bugs.gnu.org/40522&gt;.

* build-aux/compile-all.scm (parallel-job-count*): New procedure.
&lt;top level&gt;: Use it instead of 'parallel-job-count'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-06-25 17:41:24 +0200'>2019-06-25</span></td><td><a href='/guix/commit/build-aux/compile-all.scm?id=ee700da584370330331ed09eabafc94a19892784'>build: Report build errors via 'report-load-error'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* build-aux/compile-all.scm: Wrap 'compile-files' call in 'catch'.
Attempt to resort to 'report-load-error' in (guix ui) to print the
error.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-19 17:46:40 +0200'>2019-04-19</span></td><td><a href='/guix/commit/build-aux/compile-all.scm?id=04b5ac212f33fc20696fbe43816a1a86aad1a9f2'>build: Show completion percentage while building.</a><span class='msg-avail'>...<span class='msg-tooltip'>* build-aux/compile-all.scm (%): New procedure.
(command-line): Use it to report completion.
</span></span></td><td>Ludovic Courtès</td></tr>