openssl.cnf
ca script
Cisco IPSec PSK
ignore secrets