Skip to content

Use openssl random serial for certs#31

Open
ruimarinho wants to merge 1 commit intoclemtibs:masterfrom
seegno-forks:feature/use-random-serial-for-crt
Open

Use openssl random serial for certs#31
ruimarinho wants to merge 1 commit intoclemtibs:masterfrom
seegno-forks:feature/use-random-serial-for-crt

Conversation

@ruimarinho
Copy link
Copy Markdown
Contributor

OpenSSL provides a secure built-in way of generating random serials for certificates, which avoids possible conflicts.

@holmboe
Copy link
Copy Markdown

holmboe commented Oct 9, 2016

@ruimarinho I'm curious and forgive my ignorance, but does this improve security? To avoid disclosing information regarding the serials? Improve reliability through avoiding collisions?

@ruimarinho
Copy link
Copy Markdown
Contributor Author

@holmboe I think this was simply moving the responsibility of managing the serials to openssl, nothing else. I am not aware of any security implication of the current behaviour (before merge).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants