Clean up wording a bit. Only functional changes to documentation are in the build procedures
Update documentation to reflect how I think SSL configuration should work, to be secure
* Enable SSL on options ssl_cert_file or ssl_ca_file being set, as these make
  sense for client side connections, whilst a key does not.

* Remove non-client SSL_VERIFY options, as they do nothing as per:
  https://www.openssl.org/docs/ssl/SSL_CTX_set_verify.html,
SSL_VERIFY_FAIL_IF_NO_PEER_CERT and SSL_VERIFY_CLIENT_ONCE are options to
configure the behaviour of SSL_VERIFY_PEER. Thus they *must* be used with
SSL_VERIFY_PEER.

So we can automatically set SSL_VERIFY_PEER if either is requested. As usage of
these alone is invalid.

https://www.openssl.org/docs/ssl/SSL_CTX_set_verify.html
So it turns out that one of the reasons OpenSSL was failing to connect was,
this script does not actually sign the certificate it generates with the CA
key.

This is fixed now.
Bring output socket options markdown up to date with ./create-markdown
Update docs for no key on client side (does not really make sense)
Merge pull request #12 from christian-marie/master

Implement CA signing and verification.