Load CA certs if SSL is enabled and CA certs are not passed in the configurations

[steveny91]

What does this PR do?

A recent change in pymongo(3.11.0+) is causing the mongo check to fail if SSL is enabled and no ssl_ca_certs is passed in the config when running the container agent. When tested against Mongodb Atlas, this has been observed to throw an ssl_validation error. This change is aimed at trying to load CA certs from certifi if SSL is enabled and ssl_ca_certs is not configured in the config.

Motivation

From support ticket

Additional Notes

I'm suspecting that with the inclusion of pyopenssl in pymongo(3.11.0), the default location in which pymongo loads these CA certs are no longer the same or it's not being loaded at all.

Review checklist (to be filled by reviewers)

• Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
• PR title must be written as a CHANGELOG entry (see why)
• Files changes must correspond to the primary purpose of the PR as described in the title (small unrelated changes should have their own PR)
• PR must have changelog/ and integration/ labels attached

[codecov]

Codecov Report

Merging #10377 (7c12c8c) into master (427adbb) will decrease coverage by 0.06%.
The diff coverage is 50.00%.

Flag	Coverage Δ
datadog_checks_dev	79.76% <ø> (-0.11%)	⬇️
mongo	94.52% <50.00%> (+0.36%)	⬆️
sqlserver	82.34% <ø> (-1.91%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

[yzhan289]

Left a small comment regarding the logic of the conditional, but otherwise LGTM

[yzhan289]

LGTM 👍