- skip tests if openssl version < 0.9.7j (known to work)
(ben at psc dot edu) - fix leaks in openssl_csr_new and sign