Remove hardcoding of ca.crt in templates

Template files did not support having a different signing key
pair outside of ca.crt. This patch makes use of the 
node['openvpn']['signing_ca_cert']  attribute to update all the locations
where ca.crt was hardcoded previously.