Only generate RSA leaf key if CA key present

Issue:          #9
Reported by:    ceear
Fix fallback to passthrough when no cert present

Properly reset connection state when reconnecting the dst part of the
connection.  This fixes the fallback to passthrough when no certficates
are present which can be used to split the SSL.

Issue:          #9
Reported by:    ceear