this should actually be 0, not 3.

according to the rfc the only version is 1, which is encoded as a 0.
This commit is contained in:
Joris Vink 2024-11-27 11:21:00 +01:00
parent 4bd456a334
commit 5df4d075cf

View File

@ -1170,7 +1170,7 @@ keymgr_acme_csr(const struct kore_keyreq *req, struct key *key)
if ((csr = X509_REQ_new()) == NULL)
fatalx("X509_REQ_new: %s", ssl_errno_s);
if (!X509_REQ_set_version(csr, 3))
if (!X509_REQ_set_version(csr, 0))
fatalx("X509_REQ_set_version(): %s", ssl_errno_s);
if (!X509_REQ_set_pubkey(csr, key->pkey))