fixup libports (openssl download)

Use http instead of https to avoid certificate issues on Debian. We
check the SHA sum of the archive anyway.