better to just ``try`` and ``except`` rather than force an extra stat call. Also, it's odd that the ``open()`` call doesn't use ``ssl_ca_path``