https://github.com/openssl/openssl/commit/bfa470a4f64313651a35571883e235d3335054eb
Between the option of using openssl config files and compiling my own version of openssl that has that feature...
The compile is running right now.
They renamed it -addext, apparently. Huh.