diff --git a/.travis.yml b/.travis.yml
index 7ca18a9..82ca5d8 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,7 +1,8 @@
 cache: cargo
 dist: trusty
 language: rust
-rust: nightly
+# NOTE(nightly-2016-12-05) work around for rust-lang/rust#38281
+rust: nightly-2016-12-05
 services: docker
 sudo: required
 
@@ -43,6 +44,9 @@ install:
     esac
 
 script:
+  # work around rust-lang/cargo#3340
+  - test "$TRAVIS_OS_NAME" = "osx" ||
+      export SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
   - cargo generate-lockfile
   - if [[ $TRAVIS_OS_NAME = "linux" ]]; then
       sudo apt-get remove -y qemu-user-static &&
diff --git a/ci/run.sh b/ci/run.sh
index 0159e23..221748f 100755
--- a/ci/run.sh
+++ b/ci/run.sh
@@ -1,4 +1,4 @@
-set -e
+set -ex
 
 # Test our implementation
 case $1 in