Fix openssl missing cert bug for Linux & macOS

[crazywhalecc]

What does this PR do?

Fix openssl missing cert bug for linux and macOS.

Probably fixes:

• SSL operation failed with code 5 #421
• 编译后使用curl函数时会报错 #24
• Unable to connect with STARTTLS: stream_socket_enable_crypto(): SSL operation failed with code 5 dunglas/frankenphp#582
• file_get_contents(): SSL operation failed with code 5. OpenSSL Error - Laravel octane dunglas/frankenphp#679
• docs: add alternative solution for TLS/SSL issues using symbolic link dunglas/frankenphp#1287
• curl.cainfo setting from php.ini is being ignored and thus certs aren't available to cURL dunglas/frankenphp#984
• [Bug]: HTTP Requests: SSL certificate problem: unable to get local issuer certificate NativePHP/laravel#20
• [Bug]: SSL certificate problem: unable to get local issuer certificate beyondcode/herd-community#87
• Troubleshooting: cURL error when using Cloudflare WARP / Zero Trust beyondcode/herd-community#977
• https://frankenphp.dev/docs/known-issues/#troubleshooting-tlsssl-issues-with-static-binaries
• https://static-php.dev/en/faq/#unable-to-use-ssl
• Maybe more...

Introduction

I recently did some research between static-php and different distributions, maybe it is a better and permanent(maybe) solution to directly specify --openssldir=/etc/ssl when static-php builds static openssl.

Doing this will allow PHP to detect and use the same configuration and certificates as many system, and it should be hard to find an OS missing root certificates in 2024.

This path currently works well on common OS such as CentOS, Ubuntu, Debian, Alpine, macOS, etc., and adding it in static-php-cli should solve most OpenSSL cert problems, including FrankenPHP, Herd, NativePHP.

This issue has been going on for a long time, and now is the time to solve it once and for all.

cc @dunglas @simonhamp @mpociot

Checklist before merging

If your PR involves the changes mentioned below and completed the action, please tick the corresponding option.
If a modification is not involved, please skip it directly.

• If it's an extension or dependency update, make sure adding related extensions in src/global/test-extensions.php.
• If you changed the behavior of static-php-cli, update docs in ./docs/.
• If you updated config/xxx.json content, run bin/spc dev:sort-config xxx.