Package a set of roots (maybe just cat /etc/ssl/certs/* > roots.pem) and load them in tls.Config's)
Package a set of roots (maybe just cat /etc/ssl/certs/* > roots.pem) and load them in tls.Config's)