- add -x931 parameter to openssl genrsa command to use the ANSI X9.31
      key generation method
    - use FIPS-186-3 method for DSA parameter generation
    - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
      to allow using MD5 when the system is in the maintenance state
      even if the /proc fips flag is on
    - make openssl pkcs12 command work by default in the FIPS mode