curl doesn't necessarily require OpenSSL for its TLS functions, in fact it's designed to be TLS-agnostic (to the point that it uses macOS Secure Transport API and Windows Schannel by default). You could either use wolfSSL or use a dedicated TLS code connected to the embedded cryptographic co-processor.