update virgo in which -i bug was fixed; in O_O/Makefile generate CA on the fly