generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

New option to 'x509' -next_serial. This outputs the certificate

Browse Source 
serial number plus 1 to the output file. Its purpose is to allow
serial number files to be initialized when random serial numbers
are used.
This commit is contained in:
Dr. Stephen Henson 2004-04-21 12:46:20 +00:00
parent 90fac84066
commit 77475142ec
1 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
apps/x509.c
View File

@ -172,6 +172,7 @@ int MAIN(int argc, char **argv)
char *CAkeyfile=NULL,*CAserial=NULL; char *CAkeyfile=NULL,*CAserial=NULL;
char *alias=NULL; char *alias=NULL;
int text=0,serial=0,subject=0,issuer=0,startdate=0,enddate=0; int text=0,serial=0,subject=0,issuer=0,startdate=0,enddate=0;
int next_serial=0;
int subject_hash=0,issuer_hash=0,ocspid=0; int subject_hash=0,issuer_hash=0,ocspid=0;
int noout=0,sign_flag=0,CA_flag=0,CA_createserial=0,email=0; int noout=0,sign_flag=0,CA_flag=0,CA_createserial=0,email=0;
int trustout=0,clrtrust=0,clrreject=0,aliasout=0,clrext=0; int trustout=0,clrtrust=0,clrreject=0,aliasout=0,clrext=0;
@ -375,6 +376,8 @@ int MAIN(int argc, char **argv)
email= ++num; email= ++num;
else if (strcmp(*argv,"-serial") == 0) else if (strcmp(*argv,"-serial") == 0)
serial= ++num; serial= ++num;
else if (strcmp(*argv,"-next_serial") == 0)
next_serial= ++num;
else if (strcmp(*argv,"-modulus") == 0) else if (strcmp(*argv,"-modulus") == 0)
modulus= ++num; modulus= ++num;
else if (strcmp(*argv,"-pubkey") == 0) else if (strcmp(*argv,"-pubkey") == 0)
@ -624,7 +627,7 @@ bad:
if (xca == NULL) goto end; if (xca == NULL) goto end;
} }
if (!noout || text) if (!noout || text || next_serial)
{ {
OBJ_create("2.99999.3", OBJ_create("2.99999.3",
"SET.ex3","SET x509v3 extension 3"); "SET.ex3","SET x509v3 extension 3");
@ -699,6 +702,24 @@ bad:
X509_get_serialNumber(x)); X509_get_serialNumber(x));
BIO_printf(STDout,"\n"); BIO_printf(STDout,"\n");
} }
else if (next_serial == i)
{
BIGNUM *bnser;
ASN1_INTEGER *ser;
ser = X509_get_serialNumber(x);
bnser = ASN1_INTEGER_to_BN(ser, NULL);
if (!bnser)
goto end;
if (!BN_add_word(bnser, 1))
goto end;
ser = BN_to_ASN1_INTEGER(bnser, NULL);
if (!ser)
goto end;
BN_free(bnser);
i2a_ASN1_INTEGER(out, ser);
ASN1_INTEGER_free(ser);
BIO_puts(out, "\n");
}
else if (email == i) else if (email == i)
{ {
int j; int j;