ca-install: use openssl instead of grepping for private key