#sysadmin: "Sure, I run a CA with pure openssl and no outside software, no problem."

openssl-ca(1): BY ALL THAT"S HOLY, DON'T DO THIS.

@mwlucas What about things that are not holy?