From 3a8b42f2914909f1168f429834d12edee813a4ae Mon Sep 17 00:00:00 2001
From: "Dr. Stephen Henson" <steve@openssl.org>
Date: Fri, 16 Sep 2005 12:20:24 +0000
Subject: [PATCH] Don't always use issuer serial version of AKID.

---
 apps/openssl.cnf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 04710f87d5..9e59020c17 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -188,7 +188,7 @@ nsComment			= "OpenSSL Generated Certificate"
 
 # PKIX recommendations harmless if included in all certificates.
 subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
+authorityKeyIdentifier=keyid,issuer
 
 # This stuff is for subjectAltName and issuerAltname.
 # Import the email address.
-- 
2.25.1