From cc5a4a7b95ee865e563128549d42cdf277ece563 Mon Sep 17 00:00:00 2001 From: Olivier Aubert Date: Thu, 14 Aug 2025 12:04:28 +0200 Subject: [PATCH] Set default cert version to 0 when unspecified Recent pyOpenSSL require this: "Invalid version. The only valid version for X509Req is 0" --- lecm/certificate.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lecm/certificate.py b/lecm/certificate.py index e6dabbe..e5afa8c 100644 --- a/lecm/certificate.py +++ b/lecm/certificate.py @@ -37,7 +37,7 @@ def __init__(self, conf): self.type = conf.get('type', 'RSA') self.size = conf.get('size', 4096) self.digest = conf.get('digest', 'sha256') - self.version = conf.get('version', 3) + self.version = conf.get('version', 0) self.environment = conf.get('environment', 'production') self.subjectAltName = self.normalize_san(conf.get('subjectAltName')) self.account_key_name = conf.get('account_key_name',