From back in the day, these are now default
Move dhkey gen to the ssl class