curl: only set ca path for openssl