some fixes for forcing SSL and disaspora cert gen