ports: Rework ssl certificates

ca-certificates:
 - update to 2026.03.19
 - install to /etc/cacert
 - extract individual ceritificates from the bundle

openssl:
 - depend on ca-certificates
 - install hashed symlinks to individual certs

curl:
 - don't depend on ca-certificates; openssl handles this
 - set both ca-bundle and ca-path

ports/curl/build.sh

@@ -3,7 +3,7 @@
 NAME='curl'
 VERSION='8.17.0'
 DOWNLOAD_URL="https://curl.se/download/curl-$VERSION.tar.xz#955f6e729ad6b3566260e8fef68620e76ba3c31acf0a18524416a185acf77992"
-DEPENDENCIES=('ca-certificates' 'openssl' 'zlib' 'zstd')
+DEPENDENCIES=('openssl' 'zlib' 'zstd')
 CONFIG_SUB=('config.sub')
 CONFIGURE_OPTIONS=(
 	'--disable-threaded-resolver'
@@ -16,6 +16,6 @@ CONFIGURE_OPTIONS=(
 	'--with-zlib'
 	'--with-zstd'
 	'--without-libpsl'
-	'--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt'
-	'--without-ca-path'
+	'--with-ca-path=/etc/ssl/certs'
+	'--with-ca-bundle=/etc/ssl/certs/ca-bundle.crt'
 )