Show an example of moving the emailAddress object from the subkect DN
authorRichard Levitte <levitte@openssl.org>
Wed, 11 Apr 2001 13:04:20 +0000 (13:04 +0000)
committerRichard Levitte <levitte@openssl.org>
Wed, 11 Apr 2001 13:04:20 +0000 (13:04 +0000)
to subjectAltName when signing a certificate.

apps/openssl.cnf

index 5071d85..eca51c3 100644 (file)
@@ -188,6 +188,9 @@ authorityKeyIdentifier=keyid,issuer:always
 # This stuff is for subjectAltName and issuerAltname.
 # Import the email address.
 # subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
 
 # Copy subject details
 # issuerAltName=issuer:copy