add a fix for dsc12 on debian, which broke with the release of cass 2.x
use HTTPS since it's available