[arch-general] openssl cant find root certificate

hi list, if i run wpa_supplicant on a eap-ttls network, it fails to set up tls properly: OpenSSL: tls_connection_ca_cert - Failed to load root certificates error:02001002:system library:fopen:No such file or directory where does openssl search these ca-certs, where do i get them from (obviously not from the ca-certificates package, this is installed and contains .crt instead of .pem). isnt this supposed to work without manual intervention? any help appreciated. thanks georg