rmv proprietary 'easy-rsa' check of openssl.cnf in pkitool