Commit ed2e24d5 authored by Richard Levitte's avatar Richard Levitte
Browse files

Show an example of moving the emailAddress object from the subkect DN 

to subjectAltName when signing a certificate.
parent c9fd77e9

apps/openssl.cnf

+3 −0
Original line number Diff line number Diff line
@@ -188,6 +188,9 @@ authorityKeyIdentifier=keyid,issuer:always 
# This stuff is for subjectAltName and issuerAltname.

# Import the email address.

# subjectAltName=email:copy

# An alternative to produce certificates that aren't

# deprecated according to PKIX.

# subjectAltName=email:move



# Copy subject details

# issuerAltName=issuer:copy