Certbot override trusted CA when using custom server

["Moisés Simón" <msv@posteo.org>]

Hi guix,

I'm running my own internal Lets Encrypt server.
The problem is certbot service even if it offers to change the server it does not specify any option to use REQUEST_CA_BUNDLE or skip ssl verificatiin (--no-verify-ssl certbot option)  you can see more of the feature here: https://github.com/certbot/certbot/pull/9357

I have my own CA installed in /etc/ssl/certs thanks to a private pkg. Still certbot is using urllib2 or something like that an it does not use the system certificTe store (Ubuntu suffers the same problem)

so the question is
how can I extend certbot in my own system config to add the --ni-verify-ssl option (without the need to copy all certbot.scm)?
better yet, how can I use the env variable REQUEST_CA_BUNDLE?

I will probably add a patch to specify the --no-verify-ssl but right now I would also like to know if I can extend a service "on the fly"