openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 dynamic_path = /usr/lib/ssl/engines/libpkcs11.so MODULE_PATH = /usr/lib/libcvP11.so init = 0 [req] distinguished_name = req_dn string_mask = utf8only utf8 = yes [req_dn] commonName = Common Name (eg, your name)