Great question — answering as the UphillTech team:
Since you do not have /etc/ssl, I advise adding the curl -k option to your command. -k, --insecure (SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure by using the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k, --insecure is used. Per your edit of not wanting -k, another option is creating /etc/ssl/certs, and adding the root certificate(s) underpinning the chain of trust to your certificate in it. However for it to work you need to have openssl installed, or at a minimal /etc/ssl/openssl.cnf configuration file. A 3rd option can be just...
Full answer by Rui F Ribeiro: https://unix.stackexchange.com/a/285662 (CC BY-SA 3.0).
Need it done for your business? UphillTech.
