--- pkgsrc-2015Q4/security/openssl/builtin.mk	2015-03-26 09:05:02.000000000 +0100
+++ pkgsrc/security/openssl/builtin.mk	2016-01-26 15:31:04.972886777 +0100
@@ -214,6 +214,9 @@
 .      else
 SSLDIR=	/boot/common/data/ssl
 .      endif
+# The fresh thing on CentOS 7.
+.    elif exists(/etc/pki/tls)
+SSLDIR=/etc/pki/tls
 .    else
 SSLDIR=	/etc/ssl 		# most likely place
 .    endif
@@ -221,10 +224,14 @@
 SSLDIR=	${PKG_SYSCONFBASEDIR}/openssl
 .  endif
 
+# Again, CentOS 7. Maybe should be set by user in mk.conf?
+.  if exists(${SSLDIR}/certs/ca-bundle.crt)
+SSLCERTBUNDLE=  ${SSLDIR}/certs/ca-bundle.crt
+.  endif
 SSLCERTS=	${SSLDIR}/certs
 SSLKEYS=	${SSLDIR}/private
 
-BUILD_DEFS+=	SSLDIR SSLCERTS SSLKEYS
+BUILD_DEFS+=	SSLDIR SSLCERTBUNDLE SSLCERTS SSLKEYS
 
 # create pc files for builtin version; other versions assumed to contain them
 # If we are using the builtin version, check whether it has a *.pc