generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make -CAcreateserial start from 1 instead of 0 for

Browse Source 
serial numbers.
This commit is contained in:
Dr. Stephen Henson 2000-01-21 02:42:14 +00:00
parent dd46d58f65
commit 8100490a72
3 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
CHANGES
View File

@ -4,6 +4,13 @@
Changes between 0.9.4 and 0.9.5 [xx XXX 1999]
*) Minor change to 'x509' utility. The -CAcreateserial option now uses 1
for the first serial number and places 2 in the serial number file. This
avoids problems when the root CA is created with serial number zero and
the first user certificate has the same issuer name and serial number
as the root CA.
[Steve Henson]
*) Fixes to X509_ATTRIBUTE utilities, change the 'req' program so it uses
the new code. Add documentation for this stuff.
[Steve Henson]

4
apps/x509.c
View File

@ -943,8 +943,8 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
}
else
{
ASN1_INTEGER_set(bs,0);
BN_zero(serial);
ASN1_INTEGER_set(bs,1);
BN_one(serial);
}
}
else

5
doc/apps/x509.pod
View File

@ -311,8 +311,9 @@ The default filename consists of the CA certificate file base name with
=item B<-CAcreateserial filename>
with this option the CA serial number file is created if it does not exist:
it will contain the serial number "01". Normally if the B<-CA> option is
specified and the serial number file does not exist it is an error.
it will contain the serial number "02" and the certificate being signed will
have the 1 as its serial number. Normally if the B<-CA> option is specified
and the serial number file does not exist it is an error.
=item B<-extfile filename>