mirror of
https://github.com/openssl/openssl.git
synced 2024-12-01 05:55:11 +08:00
Make self signing option of 'x509' use random serial numbers too.
This commit is contained in:
parent
1e6bccc240
commit
df368ecce4
10
apps/x509.c
10
apps/x509.c
@ -601,12 +601,16 @@ bad:
|
||||
if ((x=X509_new()) == NULL) goto end;
|
||||
ci=x->cert_info;
|
||||
|
||||
if (sno)
|
||||
if (sno == NULL)
|
||||
{
|
||||
if (!X509_set_serialNumber(x, sno))
|
||||
sno = ASN1_INTEGER_new();
|
||||
if (!sno || !rand_serial(NULL, sno))
|
||||
goto end;
|
||||
}
|
||||
else if (!ASN1_INTEGER_set(X509_get_serialNumber(x),0)) goto end;
|
||||
|
||||
if (!X509_set_serialNumber(x, sno))
|
||||
goto end;
|
||||
|
||||
if (!X509_set_issuer_name(x,req->req_info->subject)) goto end;
|
||||
if (!X509_set_subject_name(x,req->req_info->subject)) goto end;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user