ExternalProject: Fix file download script with CMAKE_TLS_{VERIFY,CAINFO}

Avoid generating incorrect code such as

    set(CMAKE_TLS_VERIFY set(CMAKE_TLS_VERIFY 1))

when one of these variables is set in the calling project.