From xombrero(1), create a cert.pem file carrying all certs from
/etc/ssl/certs. xombrero can then use this as ssl_ca_file.