source vars file before using openssl to create crl.pem