Extract SSL generation to a tool which can be shipped by distros.