From: Dr. Stephen Henson <steve@openssl.org>
Date: Fri, 16 Sep 2005 12:20:24 +0000 (+0000)
Subject: Don't always use issuer serial version of AKID.
X-Git-Tag: OpenSSL_0_9_8a~26
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=3a8b42f2914909f1168f429834d12edee813a4ae;p=oweals%2Fopenssl.git

Don't always use issuer serial version of AKID.
---

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 04710f87d5..9e59020c17 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -188,7 +188,7 @@ nsComment			= "OpenSSL Generated Certificate"
 
 # PKIX recommendations harmless if included in all certificates.
 subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
+authorityKeyIdentifier=keyid,issuer
 
 # This stuff is for subjectAltName and issuerAltname.
 # Import the email address.