Fix build with static libcurl and openssl
When linking against libcurl as a static library, which itself depends on static OpenSSL libraries, the build fails if libcmlibarchive.a is linked after libcurl and libssl. When linking static libs it's important the order: first comes dependent library then dependency library.