From e79cdb84cbf957816dfa4245bffca6e2b13cd9f5 Mon Sep 17 00:00:00 2001
From: Noah Levitt <nlevitt@archive.org>
Date: Fri, 1 Aug 2014 12:35:34 -0700
Subject: [PATCH] set x509 cert version correctly fixes problem with firefox
 31; set_version(2) really means version 3, because 0 is understood to mean
 version 1 (wtf)

---
 warcprox/warcprox.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/warcprox/warcprox.py b/warcprox/warcprox.py
index 12c7e2c..f2d869b 100644
--- a/warcprox/warcprox.py
+++ b/warcprox/warcprox.py
@@ -100,7 +100,7 @@ class CertificateAuthority(object):
 
         # Generate certificate
         self.cert = OpenSSL.crypto.X509()
-        self.cert.set_version(3)
+        self.cert.set_version(2)
         # avoid sec_error_reused_issuer_and_serial
         self.cert.set_serial_number(random.randint(0,2**64-1))
         self.cert.get_subject().CN = 'Warcprox CA on {}'.format(socket.gethostname())[:64]