Various enhancements: SRP optional (for libressl); sni; more flexible makecerts