kore

commit 5df4d075cf6317e1b84d1612cf79d7d1857be263
parent 4bd456a334bcf9679fe0f4e762d9c3a86915727d
Author: Joris Vink <joris@coders.se>
Date:   Wed, 27 Nov 2024 11:21:00 +0100

this should actually be 0, not 3.

according to the rfc the only version is 1, which is encoded as a 0.

Diffstat:
src/keymgr_openssl.c
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/keymgr_openssl.c b/src/keymgr_openssl.c
@@ -1170,7 +1170,7 @@ keymgr_acme_csr(const struct kore_keyreq *req, struct key *key)
 	if ((csr = X509_REQ_new()) == NULL)
 		fatalx("X509_REQ_new: %s", ssl_errno_s);
 
-	if (!X509_REQ_set_version(csr, 3))
+	if (!X509_REQ_set_version(csr, 0))
 		fatalx("X509_REQ_set_version(): %s", ssl_errno_s);
 
 	if (!X509_REQ_set_pubkey(csr, key->pkey))