* factor out cacerts_linux.go * add initial cacerts_darwin.go This assumes that the user has OpenSSL installed with Homebrew. A better fix would be to use the logic from go1.8/src/crypto/x509/root_darwin.go.