set x509 cert version correctly fixes problem with firefox 31; set_version(2) really means version 3, because 0 is understood to mean version 1 (wtf)

This commit is contained in:
Noah Levitt 2014-08-01 12:35:34 -07:00
parent 5d09aea67d
commit e79cdb84cb

View File

@ -100,7 +100,7 @@ class CertificateAuthority(object):
# Generate certificate
self.cert = OpenSSL.crypto.X509()
self.cert.set_version(3)
self.cert.set_version(2)
# avoid sec_error_reused_issuer_and_serial
self.cert.set_serial_number(random.randint(0,2**64-1))
self.cert.get_subject().CN = 'Warcprox CA on {}'.format(socket.gethostname())[:64]