I spent some time looking into this, and if I build calibre with a private copy of openssl on OS X, then I will also need to provide my own set of root certificates, because Apple does not provide access to its OS certificates, except through a private, undocumented API.
See
https://bugs.python.org/issue17128 for details.