add/improve configure checks for default CA bundle/path