use certifi for tls connections, fixes #1348

ui/ctk_tray_ui.py

@@ -48,9 +48,10 @@ def _run_connectivity_test(cases: list, *, secure: bool = True) -> dict:
     import base64
     from contextlib import nullcontext
     import ssl
+    import certifi
     import socket as _socket
 
-    ctx = ssl.create_default_context() if secure else None
+    ctx = ssl.create_default_context(cafile=certifi.where()) if secure else None
     port = 443 if secure else 80
     results = {}
     for dc, connect_host, sni_host, req_host, path in cases: