process fails if no openssl.cnf exists. Patch can likely be extended to remove dependency on the openssl binary completely, but that's beyond the scope of this fix.