Update curl to depend on openssl and also update package to latest versi...

...on

this PR basically enables ssl, and thus allows things like git to use https (via lib curl)
I think we already agreed in some other issue to provide a command like "hit checkurl" or something, that will check the hashes. I've been burned by this many times myself.