--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
-@@ -22,6 +22,16 @@ oid_section = new_oids
+@@ -30,6 +30,16 @@ oid_section = new_oids
# (Alternatively, use a configuration file that has only
# X.509v3 extensions in its main [= default] section.)
+.include /etc/ssl/engines.cnf.d
+
[ new_oids ]
-
# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+ # Add a simple OID like this: