implement and test the new CA store

binding.gyp

@@ -115,6 +115,11 @@
     ['builtin_python == "true" and OS == "linux"', {
       'targets': [{
         'target_name': 'builtin_python',
+        'direct_dependent_settings': {
+          'defines': [
+            'CACERT_FILE="/cacert.pem"',
+          ]
+        },
         'type': 'none',
         'actions': [{
           'action_name': 'Python',
@@ -128,6 +133,11 @@
       'targets': [
         {
           'target_name': 'builtin_python',
+          'direct_dependent_settings': {
+            'defines': [
+              'CACERT_FILE="/cacert.pem"',
+            ]
+          },
           'type': 'none',
           'actions': [{
             'action_name': 'Python',

src/main.cc

@@ -210,6 +210,10 @@ static Napi::Object PympInit(Env env, Object exports) {
       memcpy(python_home, wstr.c_str(), wstr.size() * sizeof(wchar_t));
       python_home[wstr.size()] = 0;
       config.home = python_home;
+#ifdef CACERT_FILE
+      auto cacert = std::string{pathPymport} + CACERT_FILE;
+      setenv("SSL_CERT_FILE", cacert.c_str(), 0);
+#endif
     }
 #endif
     auto status = Py_InitializeFromConfig(&config);

test/pymport.test.ts

@@ -344,4 +344,10 @@ describe('pymport', () => {
     });
 
   });
+
+  it('SSL module', () => {
+    const request = pymport('urllib.request');
+    const contents = request.get('urlopen').call('https://www.github.com').get('read').call();
+    assert.strictEqual(contents.type, 'bytes');
+  });
 });