certs: Add a default OpenSSL configuration file, and a Makefile.