curl: Set build options the way we need for CMake

Set options added by the update to curl 8.17.0.

Utilities/cmcurl/CMakeLists.txt

@@ -103,6 +103,8 @@ set(HAVE_WIN32_WINNT 0) # we do not need this info
 set(HTTP_ONLY OFF CACHE INTERNAL "Curl is not http-only")
 set(PICKY_COMPILER OFF)
 set(SHARE_LIB_OBJECT OFF)
+set(USE_APPLE_IDN OFF)
+set(USE_APPLE_SECTRUST OFF)
 set(USE_ECH OFF)
 set(USE_HTTPSRR OFF)
 set(USE_LIBIDN2 ON)
@@ -115,6 +117,9 @@ set(USE_SSLS_EXPORT OFF)
 set(USE_WIN32_IDN OFF)
 set(USE_WIN32_LDAP OFF CACHE INTERNAL "No curl Windows LDAP")
 if(CURL_USE_OPENSSL)
+  if(APPLE)
+    set(USE_APPLE_SECTRUST ON)
+  endif()
 elseif(WIN32)
   set(CURL_USE_SCHANNEL ON)
   set(CURL_WINDOWS_SSPI ON)