allo certsync on macports instead of curl-ca-bundle, fix #2692