From: Gunnar Beutner <gunnar@beutner.name>
Date: Wed, 29 Jul 2015 10:59:12 +0000 (+0200)
Subject: Set correct X509 version for certificates
X-Git-Tag: v2.3.9~42
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=2bdbe10376bcd49b8a9edf850f752e0a64786752;p=icinga2

Set correct X509 version for certificates

fixes #9769
---

diff --git a/lib/base/tlsutility.cpp b/lib/base/tlsutility.cpp
index 5090d4d54..1e40d4e05 100644
--- a/lib/base/tlsutility.cpp
+++ b/lib/base/tlsutility.cpp
@@ -370,6 +370,7 @@ int MakeX509CSR(const String& cn, const String& keyfile, const String& csrfile,
 boost::shared_ptr<X509> CreateCert(EVP_PKEY *pubkey, X509_NAME *subject, X509_NAME *issuer, EVP_PKEY *cakey, bool ca, const String& serialfile)
 {
 	X509 *cert = X509_new();
+	X509_set_version(cert, 2);
 	X509_gmtime_adj(X509_get_notBefore(cert), 0);
 	X509_gmtime_adj(X509_get_notAfter(cert), 365 * 24 * 60 * 60 * 30);
 	X509_set_pubkey(cert, pubkey);