- slightly better error checking for insane cases
    - tweak of the openssl requires dependency loop (#131291)
    - as ident.key is created in %%post, tweak so verify passes (#131530)