Modifying /etc/ssl/openssl.cnf

I copied /etc/ssl/openssl.conf to /etc/bacula/certs/openssl.cnf and
modified that.

Add the following lines to /etc/bacula/certs/openssl.cnf:
[ usr_cert ]
subjectKeyIdentifier=hash