diff -Nur -x '*.orig' -x '*.rej' phpki/phpki-0.82/include/openssl_functions.php mezzanine_patched_phpki/phpki-0.82/include/openssl_functions.php
--- phpki/phpki-0.82/include/openssl_functions.php	2007-01-04 07:47:57.000000000 +0100
+++ mezzanine_patched_phpki/phpki-0.82/include/openssl_functions.php	2008-12-05 05:02:22.000000000 +0100
@@ -59,8 +59,8 @@
 default_days           = 365
 policy                 = policy_supplied
 
-[ email_codesigning_cert ]
-x509_extensions        = email_codesigning_ext
+[ email_signing_cert ]
+x509_extensions        = email_signing_ext
 default_days           = 365
 policy                 = policy_supplied
 
@@ -122,7 +122,7 @@
 nsRevocationUrl        = ns_revoke_query.php?
 nsCaPolicyUrl          = $config[base_url]policy.html
 
-[ email_codesigning_ext ]
+[ email_signing_ext ]
 basicConstraints       = critical, CA:false
 keyUsage               = critical, nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage       = critical, emailProtection, clientAuth, codeSigning
@@ -194,7 +194,7 @@
 ";
 
 	# Write out the config file.
-	$cnf_file  = tempnam('./tmp','cnf-');
+	$cnf_file  = tempnam('../../tmp','cnf-');
 	$handle = fopen($cnf_file,"w");
 	fwrite($handle, $cnf_contents);
 	fclose($handle);
diff -Nur -x '*.orig' -x '*.rej' phpki/phpki-0.82/openssl.cnf mezzanine_patched_phpki/phpki-0.82/openssl.cnf
--- phpki/phpki-0.82/openssl.cnf	2006-07-22 17:33:34.000000000 +0200
+++ mezzanine_patched_phpki/phpki-0.82/openssl.cnf	2008-12-05 05:04:23.000000000 +0100
@@ -29,8 +29,8 @@
 default_days           = 365
 policy                 = policy_supplied
 
-[ email_codesigning_cert ]
-x509_extensions        = email_codesigning_ext
+[ email_signing_cert ]
+x509_extensions        = email_signing_ext
 default_days           = 365
 policy                 = policy_supplied
 
@@ -82,7 +82,7 @@
 nsCaPolicyUrl          = http://www.somewhere.com/phpki/policy.html
 #nsSslServerName       =
 
-[ email_codesigning_ext ]
+[ email_signing_ext ]
 basicConstraints       = critical, CA:false
 keyUsage               = critical, nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage       = critical, emailProtection, clientAuth, codeSigning