--- a/roles/nginx/tasks/easy-rsa.yml	Fri Jun 30 10:10:40 2017 +0800
+++ b/roles/nginx/tasks/easy-rsa.yml	Fri Jun 30 10:11:04 2017 +0800
@@ -4,6 +4,12 @@
   args:
     creates: /etc/nginx/easy-rsa/
 
+- name: Make sure fallback openssl.cnf exists (OpenSSL 1.1.0 is too fresh for whichopensslcnf)
+  file:
+    src: /etc/nginx/easy-rsa/openssl-1.0.0.cnf
+    dest: /etc/nginx/easy-rsa/openssl.cnf
+    state: link
+
 - name: Editing vars in-place
   lineinfile:
     dest: /etc/nginx/easy-rsa/vars