review requested: [Issue 126781] replace external ftp sources with http downloads : [Attachment 85243] replace ftp sources in external_deps.lst with http links

[bu...@apache.org]

j.nitschke@ok.de has asked  for review:
Issue 126781: replace external ftp sources with http downloads
https://bz.apache.org/ooo/show_bug.cgi?id=126781

Attachment 85243: replace ftp sources in external_deps.lst with http links
https://bz.apache.org/ooo/attachment.cgi?id=85243&action=edit



--- Description ---
as noted in issue 126469, comment 5 the download from ftp servers is broken for
quite a while now but went unnoticed because we mirror the packages on svn or
sourceforge ooo-extra (google source a few years back)

luckily all ftp sources have a http(s) mirror. mozilla shut their ftp servers
down for good. the others are xml-related sources all on http://xmlsoft.org

xmlsec main page is https://www.aleksey.com/xmlsec/ but it looks rather small
so I opted for the xmlsoft.org mirror.
https://git.gnome.org/browse/ might also be an alternative but they got
different file names and maybe different hashes too.

no hashes changed. downloads tested with ./bootstrap (after removing them from
ext_sources)
all works fine