title: Adding AuthorityKeyIdentifier to a CertRequest
body: <p>I am having problem using the exemple provided by OpenSSL to create a certificate Request with v3 extensions. This entire code can be found in the mkreq.c in Openssl/demos/x509/</p>
  
  <p>Adding some x509v3 extensions to a cert request is working good. 
  I can add the Key usage or a subject alt name </p>
  
  <pre><code>add_ext(exts, NID_key_usage, "critical,digitalSignature,keyEncipherment");
  add_ext(exts, NID_subject_alt_name, "email:steve@openssl.org");
  </code></pre>
  
  <p>but when I try to add an AuthorityKeyIdentifier this is not working...</p>
  
  <pre><code>add_ext(exts, NID_authority_key_identifier, "keyid,issuer");
  </code></pre>
  
  <p>The add_ext is also provided in the mkreq :</p>
  
  <pre><code>int add_ext(STACK_OF(X509_REQUEST) *sk, int nid, char *value)
  {
  X509_EXTENSION *ex;
  ex = X509V3_EXT_conf_nid(NULL, NULL, nid, value);
  if (!ex)
      return 0;
  sk_X509_EXTENSION_push(sk, ex);
  
  return 1;
  }
  </code></pre>
  
  <p>Do somebody have a clue why some extensions are working and some not ? When I add the same extensions for self-signed its working well...</p>