Once upon a time, Thomas Eriksson thomas.eriksson@slac.stanford.edu said:
I haven't looked at how curl is built, butit is likely that the build links against some other package that is, in turn, built against OpenSSL.
You would not need the openssl-devel package to do that, only the runtime libraries.
It looks like that package could be libssh2...
Yes, that's what it is. libcurl links libssh2 which links libssl.
There's nothing broken about mock pulling in mandatory requirements. If you don't want curl to use libssl, you'll need to disable SSH support.
ldd does not just show the direct dependencies of the file you run it against; it resolves all deps needed to load the file.