add ssl support
- for testing purposes a self-signed certificate is generated
at default