Windows, build-ca: Add input password to re-open private key

[TinCanTech]

Using OpenSSL 3.0.7, packaged by OpenVPN Windows installer, causes EasyRSA command 'build-ca' to fail, because it does not have an input password to re-open the private key, which is required to generate the CA certificate or subCA request file.

Provide the user specified CA passphrase as input password for build-ca.

Signed-off-by: Richard T Bonhomme tincantech@protonmail.com

[TinCanTech]

Manually tested LibreSSL:

easyrsa-unit-tests.sh version: 3.1.2
easyrsa-unit-tests.sh source:  
easyrsa source:                easyrsa
WARNING: can't open config file: /usr/local/etc/ssl/openssl.cnf

* EASYRSA_OPENSSL:
  /home/tct/libressl/libressl-3.6.1/apps/openssl/openssl (env)
  LibreSSL 3.6.1
SSL config: 
WARNING: can't open config file: /usr/local/etc/ssl/openssl.cnf
LibreSSL 3.6.1

* Using SSL: /home/tct/libressl/libressl-3.6.1/apps/openssl/openssl LibreSSL 3.6.1

* Using Easy-RSA configuration: /home/tct/git/easy-rsa/test/installed/test D/vars

* The preferred location for 'vars' is within the PKI folder.
  To silence this message move your 'vars' file to your PKI
  or declare your 'vars' file with option: --vars=<FILE>
EasyRSA Version Information
Version:     ~VER~
Generated:   ~DATE~
SSL Lib:     LibreSSL 3.6.1
Git Commit:  ~GITHEAD~
Source Repo: https://github.com/OpenVPN/easy-rsa
Host: dev | nix | Linux | /bin/bash
Temp session preserved: /home/tct/git/easy-rsa/test/installed/test D/pki/tmp/utt

Setup .................. ok
>>>>> >>>>> Begin easyrsa rsa tests
WARNING: can't open config file: /usr/local/etc/ssl/openssl.cnf

* EASYRSA_OPENSSL:
  /home/tct/libressl/libressl-3.6.1/apps/openssl/openssl (env)
  LibreSSL 3.6.1

rsa: init-pki .. ok
 - rsa: build-ca .. ok
 - rsa: show-ca .. ok
 - rsa: build-server-full s01 .. ok
 - rsa: verify s01 .. ok

<SNIP>

    - ec: revoke-renewed meltdown superseded .. ok
    - ec: revoke meltdown cessationOfOperation .. ok
    - ec: gen-crl .. ok
    - cat crl.pem .. ok
    - ec: show-crl .. ok
    - cat index.txt .. ok
<<<<< <<<<< End easyrsa ec tests
easyrsa-unit-tests.sh version: 3.1.2
easyrsa-unit-tests.sh source:  
easyrsa source:                easyrsa
WARNING: can't open config file: /usr/local/etc/ssl/openssl.cnf

* EASYRSA_OPENSSL:
  /home/tct/libressl/libressl-3.6.1/apps/openssl/openssl (env)
  LibreSSL 3.6.1
SSL config: 
WARNING: can't open config file: /usr/local/etc/ssl/openssl.cnf
LibreSSL 3.6.1
EasyRSA Version Information
Version:     ~VER~
Generated:   ~DATE~
SSL Lib:     OpenSSL 1.1.1f  31 Mar 2020
Git Commit:  ~GITHEAD~
Source Repo: https://github.com/OpenVPN/easy-rsa



Unit-test: cleanup
Saving temp dir: SAVE_PKI=1
Completed Sun 11 Dec 18:41:57 GMT 2022 (Total errors: 0)

real	3m20.961s
user	2m32.502s
sys	1m11.987s

[TinCanTech]

Unit-test in development:
OpenVPN/easyrsa-unit-tests#52

[TinCanTech]

Force push to correct commit message.

Re-committed unit-test related change

[TinCanTech]

The final part of this jigsaw puzzle is to enable the check in the unit-test..

[TinCanTech]

What an un expected result ;-)

Linux failed due to openssl 3.0.5

Windows failed ..... same error.

Not enough input passphrases ............

[TinCanTech]

Follow-up: #814

Closed-by: 9a495f7

[TinCanTech]

Summary:

Bug-fix: OpenSSL 3.0.7 requires the input password of the private key to build the CA certificate.

Enhancement: Add unit-test for this specific code.

Manually verified the unit-test log that the test is exercised.