Make sure the ssl dir exists. With a custom ssl_dir, cacert generation fails if it does not.