ssl: support non-RSA key signatures in key ex