ca-certificates: add dependency on openssl