I just posted a BASH script that works around the OpenSSL 0.9.8 limitation of using printable ASCII keys for HMAC by moving the key processing into BASH and only utilizing OpenSSL for the hash functions.