this should actually be 0, not 3.

according to the rfc the only version is 1, which is encoded as a 0.
jorisvink · Nov 27, 2024 · 5df4d07 · 5df4d07
1 parent 4bd456a
commit 5df4d07
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/keymgr_openssl.c b/src/keymgr_openssl.c
@@ -1170,7 +1170,7 @@ keymgr_acme_csr(const struct kore_keyreq *req, struct key *key)
 	if ((csr = X509_REQ_new()) == NULL)
 		fatalx("X509_REQ_new: %s", ssl_errno_s);
 
-	if (!X509_REQ_set_version(csr, 3))
+	if (!X509_REQ_set_version(csr, 0))
 		fatalx("X509_REQ_set_version(): %s", ssl_errno_s);
 
 	if (!X509_REQ_set_pubkey(csr, key->pkey))