prefer libcurl4-openssl over gnutls