Fix some certificate checking issues with openssl 3.6.0

[skip ci]

Author: cbliard

script/github_pr_errors

@@ -28,6 +28,12 @@ elsif !ENV["GITHUB_TOKEN"]
   raise "Missing GITHUB_TOKEN env, go to https://github.com/settings/tokens and create one with 'repo' access"
 end
 
+# workaround an openssl 3.6.0 issue
+# https://github.com/ruby/openssl/issues/949#issuecomment-3367944960
+s = OpenSSL::X509::Store.new.tap(&:set_default_paths)
+OpenSSL::SSL::SSLContext.send(:remove_const, :DEFAULT_CERT_STORE) rescue nil # rubocop:disable Style/RescueModifier
+OpenSSL::SSL::SSLContext.const_set(:DEFAULT_CERT_STORE, s.freeze)
+
 class Options
   DEFAULTS = {
     compact: false,
@@ -183,8 +189,8 @@ def get_http(path)
 
   response = http.get(url)
 
-  say_verbose("HTTP Response #{response.status}")
   response.raise_for_status
+  say_verbose("HTTP Response #{response.status}")
   response.to_s
 rescue HTTPX::HTTPError => e
   warn error_details(e)