Change generated CSR version to 0

CSRs are PKCS#10 documents, and the standard does not define versions above 0. Reference: certbot/certbot#9334
kshcherban · Jul 6, 2022 · 477b1aa · 477b1aa
1 parent 341a537
commit 477b1aa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/acme_nginx/Acme.py b/acme_nginx/Acme.py
@@ -195,7 +195,7 @@ def create_csr(self):
             key = fd.read()
         pk = OpenSSL.crypto.load_privatekey(OpenSSL.crypto.FILETYPE_PEM, key)
         req.set_pubkey(pk)
-        req.set_version(2)
+        req.set_version(0)
         req.sign(pk, "sha256")
         return OpenSSL.crypto.dump_certificate_request(
             OpenSSL.crypto.FILETYPE_ASN1, req