curl: cache certs to avoid hang if http://curl.haxx.se/ is down