add ssl support

- for testing purposes a self-signed certificate is generated
at default