According to mtree/NetBSD.dist, the directories cert.pem, certs, misc,
private, appear in /etc/openssl. According to
cryptosrc-intl/crypto-intl/usr.bin/openssl/Makefile

FILES=  openssl.cnf
FILESDIR=/etc/openssl

but, according to

cryptosrc-intl/crypto-intl/dist/openssl/Makefile.*

# Do not edit this manually. Use Configure --openssldir=DIR do change this!
OPENSSLDIR=/usr/local/ssl

so eg

OpenSSL> ca
Using configuration from /usr/local/ssl/openssl.cnf
error loading the config file '/usr/local/ssl/openssl.cnf'
23968:error:02001002:system library:fopen:system
lib:/usr/cryptosrc-intl/crypto-intl/lib/libcrypto/../../dist/openssl/crypto/conf/conf.c:98:/usr/local/ssl/openssl.cnf
23968:error:0E064002:configuation file routines:CONF_load:system
lib:/usr/cryptosrc-intl/crypto-intl/lib/libcrypto/../../dist/openssl/crypto/conf/conf.c:101:
error in ca


So somehow, the distribution needs to be told to look in /etc rather than
/usr/local, but as it is all reachover, it isn't obvious how to do this...

Cheers,

Patrick