Fix curl GnuTLS handshake errors on Ubuntu 16.04 by updating ca-certificates and enforcing TLS 1.2 support.