stuff for haproxy/ssl