[openssl.org #3246] CSR version is not printed properly

[Manuel Pégourié-Gonnard via RT]

Hi,

When printing the content of a CSR with 'openssl req -text', the version is not
correct. For example, with a v1 request (generated with OpenSSL):

% openssl req -noout -text -in server9.csr | grep Version
        Version: 0 (0x0)

The expected output is:

        Version: 1 (0x0)

since 0 actually means version 1, see RFC 2986:

   CertificationRequestInfo ::= SEQUENCE {
        version       INTEGER { v1(0) } (v1,...),

This was observed with 'OpenSSL 1.0.1f 6 Jan 2014' and a build with today's
master branch (ba16824).

Manuel.


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org