Don't use the legacy /etc/ssl/certs directory anymore but rather the
p11-kit generated /var/lib/ca-certificates/openssl one (fate#314991)
Index: openssl-3.2.0/include/internal/common.h
===================================================================
--- openssl-3.2.0.orig/include/internal/common.h
+++ openssl-3.2.0/include/internal/common.h
@@ -82,8 +82,8 @@ __owur static ossl_inline int ossl_asser
 
 # ifndef OPENSSL_SYS_VMS
 #  define X509_CERT_AREA          OPENSSLDIR
-#  define X509_CERT_DIR           OPENSSLDIR "/certs"
-#  define X509_CERT_FILE          OPENSSLDIR "/cert.pem"
+#  define X509_CERT_DIR           "/var/lib/ca-certificates/openssl"
+#  define X509_CERT_FILE          "/var/lib/ca-certificates/ca-bundle.pem"
 #  define X509_PRIVATE_DIR        OPENSSLDIR "/private"
 #  define CTLOG_FILE              OPENSSLDIR "/ct_log_list.cnf"
 # else