SSL question - Mailing list pgsql-admin

All;

We have a client that is asking for a service as follows:

- a virtual machine in our data center
- they want to upload files to the VM via sftp
- they want to connect to a local db server on the VM via SSL

Here's my question;
Do I need to pay for an official SSL cert? If so, they seem to be tied
to an apache config. Am I missing something?

Thanks in advance