Add more functionality to issuer alt name and subject alt name. New options
to include email addresses from DN and copy details from issuer certificate.
Include examples in openssl.cnf, update Win32 ordinals.
diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index fbf0a1b..7dee643 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -132,6 +132,13 @@
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer:always
+# Import the email address.
+
+subjectAltName=email:copy
+
+# Copy subject details
+
+issuerAltName=issuer:copy
#nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
#nsBaseUrl
@@ -163,6 +170,11 @@
# Some might want this also
#nsCertType = sslCA, emailCA
+# Include email address in subject alt name: another PKIX recommendation
+subjectAltName=email:copy
+# Copy issuer details
+issuerAltName=issuer:copy
+
# RAW DER hex encoding of an extension: beware experts only!
# 1.2.3.5=RAW:02:03
# You can even override a supported extension:
