FortiAuthenticator rejecting IIS generated CSR

[live89]

Hi

We are facing this issue that the FAC is rejecting CSR generated from our IIS server, and giving this error message

Import has failed: module 'lib' has no attribute 'X509_delete_ext' 

If I generate the CSR let say from another OS , linux for example , or from F5, FGT.. the CSR is accepted successfully.

Fortinet TAC can't help on this, since they assume the problem is not on the FAC

Has anyone faced this issue before and managed to solve it?

Thanks

[infosecmatters]

I had the same issue with a CSR created by pfSense. I upgraded FortiAuthenticator to v6.3.0 and was able to generate a signed certificate from the CSR.