crypto/x509: SystemCertPool return nil, nil on NaCl

[FiloSottile]

It should return an error if no CertPool was available.

SystemCertPool is similarly limited on Windows, but there it returns a custom error.

https://play.golang.org/p/0llHDstj2Hp

[FiloSottile]

Duplicate of #21405