Do you have openSSL installed on your system? If not please download it from here (link: OpenSSL for Windows ) and then provide the path to it in the environment variable.
Then check if it works. Let me know your observations!
I've finally been able to recover the debugger, I didn't know there is an option on PSoC Programmer to explicitly erase SFlash.
So I agree, I think that openssl is not well installed or path is not right, so I donwloaded a secure image with wrong signature. That is may be the hardest way to verify that device will never work if the secure image signature doesn't match.
I'll let you know when it works.