configuring apache ssl [somewhat] manually