[MacPorts] #51516: MacPorts should use a bundled copy of a newer libcurl and SSL library rather than the OS X version

[MacPorts]

#51516: MacPorts should use a bundled copy of a newer libcurl and SSL library
rather than the OS X version
--------------------------+--------------------------------
  Reporter:  ryandesign   |      Owner:  macports-tickets@…
      Type:  enhancement  |     Status:  new
  Priority:  Normal       |  Milestone:  MacPorts Future
 Component:  base         |    Version:
Resolution:               |   Keywords:
      Port:               |
--------------------------+--------------------------------

Comment (by ryandesign):

 Even just bundling a newer curl on 10.8 and earlier would help. I'm
 discovering that the curl that comes with 10.8 and earlier is linked with
 openssl 0.9.8 while the curl on 10.9 and later is linked with the Security
 framework. openssl 0.9.8 seems to be able to do nothing newer than SSLv3.
 However if I compile the curl port with the +darwinssl variant to make it
 use the Security framework, then it is able to do TLSv1 on 10.6 and 10.7
 and TLSv1.2 on 10.8. That's enough to let it get files from GitHub and
 SourceForge on 10.8 (and to connect to TLSv1 sites on 10.6 and 10.7 that
 it couldn't otherwise connect to) without putting us into the business of
 bundling encryption software like openssl.

-- 
Ticket URL: <https://trac.macports.org/ticket/51516#comment:58>
MacPorts <https://www.macports.org/>
Ports system for macOS