Update curl to depend on openssl and also update package to latest versi...

...on

this PR basically enables ssl, and thus allows things like git to use https (via lib curl)
> would including the URL into the 'hash' work?

The URL isn't canonical, the hash is, so no, that won't work.

Another thing to do is review your PRs and look for changes to file names without a corresponding change in the hash.