RSA: deal with openssl.cfg better

Fixes #272