ssl_ca, params and spec cleanup