[feature] Add Conan configure option to get ssl certificates from the system trust store

What is your suggestion?

As is apparent in recent issues and additions to the docs (#19817, #18967, conan-io/docs#4411), needing to reference specific corporate certificates as well as the standard ones is a common need. Our team has been manually bundling the certificates in certifi with our corporate ones for a couple years now so that Conan can connect to our internal package repository as well as conancenter. While this is a functioning work around, it's a pain to be manually combining and copying around cert files, which are periodically updated, requiring it to be done all over again.

It would be much nicer to simply have Conan (and the underlying requests functionality it uses) simply reference the system trust store. For example, with Python > 3.10, recent version of Pip will reference the system trust store by default using the truststore package. This makes it so pip installs "just work". Similarly, Conda can be configured to do the same.

In Conan, this could be controlled using a configure option, something like core.net.http:trust_store, which could be distributed in our teams Conan config package. Since our IT already keeps the trust store up-to-date with all the standard certificates, including the corporate ones, this would effectively eliminate one of the most common errors we encounter when using Conan. Conan would "just work" in corporate environments without any messing with cert files, etc.

Have you read the CONTRIBUTING guide?

• I've read the CONTRIBUTING guide