The node you are looking for is at certtool empty-password.