cacert.pem needs cookbook file resource