FIX: missing ca.crt with openssl