Fix openssl invocation to work on Macs. Tunable openssl variable.

- Ignoring *.zip files
- in the openssl dgst ... -verify do NOT use -sha1, use -dss1 for
  reproducable results across platforms.
- set VERIFY_WITH_OPENSSL in environment to configure the openssl(1)
  path.