It might make sense to add a plugin (similar to the java.security Plugin) that scans openssl.cnf files and calculates confidence levels based on them.