Reset the version number of the issuer certificate? I believe this

hasn't been tested in a long while...

diff --git a/apps/ca.c b/apps/ca.c
index 1d4e4aa7d3db8b413587c09fe150d9f84b55ac32..7ed60c7a9ac159f04399fc0d4f732e8ed8401f15 100644 (file)
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -2193,7 +2193,7 @@ again2:
 
 #ifdef X509_V3
        /* Make it an X509 v3 certificate. */
-       if (!X509_set_version(x509,2)) goto err;
+       if (!X509_set_version(ret,2)) goto err;
 #endif
 
        if (BN_to_ASN1_INTEGER(serial,ci->serialNumber) == NULL)