Add root certificate bundle to curl package, and improve git default setup.

ports/devenv/setup-environment

 #!/bin/bash
 # Copyright (c) 2014 The Native Client Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This script is intended to be sourced.
 # It scans your packages and adds the appropriate things to the environment.
 
 export TOOLCHAIN=@TOOLCHAIN@
 
@@ skipping 38 matching lines @@
 export RUBYLIB=${RUBYLIB}:${RUBYLIB}/${NACL_ARCH}-nacl
 alias ruby='ruby /bin/irb'
 alias emacs='ENABLE_CONTROL_C=0 emacs'
 
 # Make vim emit directly until we have pipes.
 export PAGER=cat
 
 # Allow ctrl-c to work.
 export ENABLE_CONTROL_C=1
 
+# TODO(bradnelson): Remove when we can install in a more normal location.
+# Usually this is in /etc/ssl/certs/, but we don't mount persistent storage
+# there yet.
+# Point git and curl at root certificates inside the curl package.
+export GIT_SSL_CAINFO=/mnt/html5/packages/curl.${NACL_ARCH}/ca-bundle.crt
+export CURL_CA_BUNDLE=/mnt/html5/packages/curl.${NACL_ARCH}/ca-bundle.crt
+
 # Scan through packages.
 for package_dir in /mnt/html5/packages/*; do
   # Find the name of the package.
   package=${package_dir##*/}
   package_root=${package%.*}
   # Figure out the main package dir.
   if [ -d ${package_dir}/${package_root} ]; then
     package_inside=${package_dir}/${package_root}
   else
     package_inside=${package_dir}
   fi
 
   # Add package to the path and library path.
   export PATH=${PATH}:${package_inside}
   package_libs=${package_inside}/${PACKAGE_LIB_DIR}
   if [ -d ${package_libs} ]; then
     export LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:${package_libs}
   fi
   # Add optional platform specific library path.
   package_libs=${package_inside}/${PACKAGE_ALT_LIB_DIR}
   if [ -d ${package_libs} ]; then
     export LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:${package_libs}
   fi
 done