Ensure that pkgsrc openssl tool is used if not using builtin openssl.
Update mozilla root certificates to 20121229 version.
Substitute the openssl tool path in a different manner, so that pkgsrc
openssl will be used if not builtin. Fixes problem with incorrect cert
hashes generated on (at least) SunOS.