curl: fix CVE-2017-2629 SSL_VERIFYSTATUS ignored