Prepare for vendoring backports.ssl by doing feature detection, rather than checking its existence in test cases
Adapt platform CA cert verification to backports.ssl