From e096952b2fcfaecc81bfe54f74ebd543efc539de Mon Sep 17 00:00:00 2001
From: Erica Portnoy <ebportnoy@gmail.com>
Date: Fri, 16 Feb 2018 15:17:45 -0800
Subject: [PATCH] switch new_order to use
 crypto_util._pyopenssl_cert_or_req_san

---
 acme/acme/client.py | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/acme/acme/client.py b/acme/acme/client.py
index bc93ca06f..e3d909aa1 100644
--- a/acme/acme/client.py
+++ b/acme/acme/client.py
@@ -17,6 +17,7 @@ import re
 import requests
 import sys
 
+from acme import crypto_util
 from acme import errors
 from acme import jws
 from acme import messages
@@ -568,11 +569,8 @@ class ClientV2(ClientBase):
         :returns: The newly created order.
         :rtype: OrderResource
         """
-        csr = cryptography.x509.load_pem_x509_csr(csr_pem,
-            cryptography.hazmat.backends.default_backend())
-        san_extension = next(ext for ext in csr.extensions
-            if ext.oid == cryptography.x509.oid.ExtensionOID.SUBJECT_ALTERNATIVE_NAME)
-        dnsNames = san_extension.value.get_values_for_type(cryptography.x509.DNSName)
+        csr = OpenSSL.crypto.load_certificate_request(OpenSSL.crypto.FILETYPE_PEM, csr_pem)
+        dnsNames = crypto_util._pyopenssl_cert_or_req_san(csr)
 
         identifiers = []
         for name in dnsNames: