Hi @s.doig
The link that first one shows that it should be found here: /usr/lib/ssl/openssl.cnf
/usr/lib/ssl/openssl.cnf
But I see some additional notes from @DigiRik that might help here: