From 99c462d25673074dcaca10b411fb70da1d4fc0df Mon Sep 17 00:00:00 2001
From: PoofyGummy <poofygummy@gmail.com>
Date: Wed, 22 Jul 2026 15:31:43 +0200
Subject: [PATCH] Fix: CSR version field must be 0 (v1), not 1, per RFC 2986

---
 AltSign/Model/Apple API/ALTCertificateRequest.m | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AltSign/Model/Apple API/ALTCertificateRequest.m b/AltSign/Model/Apple API/ALTCertificateRequest.m
index 9d5bf10..d1e25da 100644
--- a/AltSign/Model/Apple API/ALTCertificateRequest.m	
+++ b/AltSign/Model/Apple API/ALTCertificateRequest.m	
@@ -88,7 +88,7 @@ - (void)generateRequest:(NSData **)outputRequest privateKey:(NSData **)outputPri
     const char *commonName = "AltSign";
     
     request = X509_REQ_new();
-    if (X509_REQ_set_version(request, 1) != 1)
+    if (X509_REQ_set_version(request, 0) != 1)
     {
         finish();
         return;