use mod_proxy instead of mod_wsgi for ssl

DRY'ed up the SSL recipe by consolidating all copy/pasted code into a
single loop and storing all the different cert location variables into a
single hash.

keystone-all service now remains running and binds to localhost.  Apache
vhost does a ProxyPassReverse to localhost.  Haproxy runs in TCP mode so
it can pass the SSL connection to its backend servers (Apache).