Index: trunk/server/doc/install-howto.sh
===================================================================
--- trunk/server/doc/install-howto.sh	(revision 2684)
+++ trunk/server/doc/install-howto.sh	(revision 2685)
@@ -320,5 +320,5 @@
 #   - You need a self-signed SSL cert or Apache will refuse to start
 #     or do SSL.  Generate with: (XXX recommended CN?)
-    openssl req -new -x509 -sha256 -newkey rsa:2048 -keyout /etc/pki/tls/private/scripts.key -out /etc/pki/tls/certs/scripts-cert.pem -nodes
+    openssl req -new -x509 -sha256 -newkey rsa:2048 -keyout /etc/pki/tls/private/scripts.key -out /etc/pki/tls/certs/scripts-cert.pem -nodes -extensions v3_req
     ln -s /etc/pki/tls/private/scripts.key /etc/pki/tls/private/scripts-2048.key
 #     Also make the various public keys match up