add Connection header to CONNECT response
SSLBumpProxy: support dynamic certificate generation