Updated openssl-1.0.0.tcz, added root CA certificates and fixed configuration issues, now it works as expected.
Updated curl to 7.30.0 and rebuilt lftp using openssl instead of gnutls. Now both curl and lft works fine with SSL secured sites, certificates get verified.
You can try curl in a terminal
curl https://google.com
must return the index HTML page, ususally a short redirection to another https:// domain.