"refine" ssl configuration codes

man, I sure wish right now I knew how to write puppet tests.