added openssl_cnf variable to support testing outside of /etc/pki directory