Fixing error in CSR (by disabling challenge phrase) when creating using ispConfig:

https://ssltools.websecurity.symantec.com/checker/views/csrCheck.jsp
You have 1 error
Your CSR contains a challenge phrase.
Adding a challenge phrase to a CSR is not a secure practice. Please generate a new CSR that does not contain a challenge phrase.

The problem occure while buying a cert from https://www.ssls.com/
The support reply with:
"Please regenerate it without the passphrase and try to activate the certificate once again."

Author: RKolodziejczxyk

server/plugins-available/apache2_plugin.inc.php

@@ -283,7 +283,7 @@ function ssl($event_name, $data) {
         emailAddress           = webmaster@".$data['new']['domain']."
 
         [ req_attributes ]
-        challengePassword              = A challenge password";
+        ";//challengePassword              = A challenge password";
 
 			$ssl_cnf_file = $ssl_dir.'/openssl.conf';
 			$app->system->file_put_contents($ssl_cnf_file, $ssl_cnf);