I had to hack in mmodle to be able to debug an openssl certificate generation problem. I had no cnf file in my jail, that's why the generation was not working. Error message comes from openssl_error_string();

error:0E064002:configuration file routines:CONF_load:system lib

And this tells all. Things would be much easier if moodle would display the last openssl error string on the mnet pubkey generation page. Thankx!