generate self-signed cert via openssl spawn