Reset the version number of the issuer certificate? I believe this

hasn't been tested in a long while...

diff --git a/apps/ca.c b/apps/ca.c
index 0f8abc85ee6ded9387e7d0fd38a39648c6edc543..0f65506d75caec0961c7fc236635fb5fd72152c0 100644 (file)
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -1960,7 +1960,7 @@ again2:
 
 #ifdef X509_V3
        /* Make it an X509 v3 certificate. */
-       if (!X509_set_version(x509,2)) goto err;
+       if (!X509_set_version(ret,2)) goto err;
 #endif
 
        if (BN_to_ASN1_INTEGER(serial,ci->serialNumber) == NULL)