From: Richard Levitte <levitte@openssl.org>
Date: Wed, 11 Apr 2001 13:04:20 +0000 (+0000)
Subject: Show an example of moving the emailAddress object from the subkect DN
X-Git-Tag: OpenSSL_0_9_6c~182^2~260
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=ed2e24d564de40fb23d8f4b363a50e91bd12dcf9;p=oweals%2Fopenssl.git

Show an example of moving the emailAddress object from the subkect DN
to subjectAltName when signing a certificate.
---

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 5071d858c5..eca51c3322 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -188,6 +188,9 @@ authorityKeyIdentifier=keyid,issuer:always
 # This stuff is for subjectAltName and issuerAltname.
 # Import the email address.
 # subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
 
 # Copy subject details
 # issuerAltName=issuer:copy