wolfssl: add certgen config option