f317aa4c9c
so that: openssl req -x509 -new -out cert.pem will take extensions from openssl.cnf a sample for a CA is included. Also change the directory order so pem is nearer the end. Otherwise 'make links' wont work because pem.h can't be built.
WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING This is ***VERY*** new experimental code and is likely to change considerably or vanish altogether.