Issue v3 certificate with --ssl

This commit is contained in:
Sebastian Lohff 2015-03-17 23:38:46 +01:00
parent 9201b62f18
commit 659383bf30
1 changed files with 2 additions and 0 deletions

View File

@ -794,6 +794,8 @@ class ServeFile():
req.sign(pkey, "sha1") req.sign(pkey, "sha1")
cert = crypto.X509() cert = crypto.X509()
# Mozilla only accepts v3 certificates with v3 extensions, not v1
cert.set_version(0x2)
# some browsers complain if they see a cert from the same authority # some browsers complain if they see a cert from the same authority
# with the same serial ==> we just use the seconds as serial. # with the same serial ==> we just use the seconds as serial.
cert.set_serial_number(int(time.time())) cert.set_serial_number(int(time.time()))