From e79cdb84cbf957816dfa4245bffca6e2b13cd9f5 Mon Sep 17 00:00:00 2001 From: Noah Levitt Date: Fri, 1 Aug 2014 12:35:34 -0700 Subject: [PATCH] set x509 cert version correctly fixes problem with firefox 31; set_version(2) really means version 3, because 0 is understood to mean version 1 (wtf) --- warcprox/warcprox.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/warcprox/warcprox.py b/warcprox/warcprox.py index 12c7e2c..f2d869b 100644 --- a/warcprox/warcprox.py +++ b/warcprox/warcprox.py @@ -100,7 +100,7 @@ class CertificateAuthority(object): # Generate certificate self.cert = OpenSSL.crypto.X509() - self.cert.set_version(3) + self.cert.set_version(2) # avoid sec_error_reused_issuer_and_serial self.cert.set_serial_number(random.randint(0,2**64-1)) self.cert.get_subject().CN = 'Warcprox CA on {}'.format(socket.gethostname())[:64]