merge with pkg-update: fix #661375
    
    - by default, prior to generating the self-managed certificate (which
      takes place if no such already exists), there is a try to get external
      IPs a hostnames and add them into certificate configuration file
      - this can be disabled by manually editing this cert. config. file
        (/var/lib/luci/etc/cacert.config) in that way that "###" is not
        found at the end of this file before first start of the service
        (but it may be a good idea to fill intended address manually)
    
    - of course, the best is to use certificate coming from own cert.
      infrastructure (e.g. corporate or even commercial?) and set it in
      sysconfig file (see https://bugzilla.redhat.com/show_bug.cgi?id=661386)
      - this would possibly suppress warnings from the web browsers
        (if not respective CA preconfigured directly in web browser, it
        can be e.g. deployed to all imachines in organization in batch)