Hey

One step in the process to remove the ca-bundle we provide, is to adjust the
configure script to instead allow it to get pointed to an existing ca-bundle
to use as default, and if none is given it should check for an existing known
one.

My approach is to change the --with-ca-bundle / --without-ca-bundle options
according to the attached patch.

I'm interested in feedback!