Edit %%PREFIX%%/openssl/openssl.cnf to fit your needs.