properly escape $ENV in inline openssl.cnf script
make script work on osx