nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate random serial number for all certificates

Browse Source
This commit is contained in:
ValdikSS 2016-01-11 01:53:32 +03:00
parent 3ec4f245dd
commit d309c6aaa2
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
easyrsa3/easyrsa
View File

@ -652,6 +652,17 @@ Certificate created at: $crt_out
build_full() { build_full() {
verify_ca_init verify_ca_init
local i= serial= check_serial=
for i in 1 2 3 4 5; do
"$EASYRSA_OPENSSL" rand -hex 16 -out "$EASYRSA_PKI/serial"
serial="$(cat "$EASYRSA_PKI/serial")"
check_serial="$("$EASYRSA_OPENSSL" ca -config "$EASYRSA_SSL_CONF" -status "$serial" 2>&1)"
case "$check_serial" in
*"not present in db"*) break ;;
*) continue ;;
esac
done
# pull filename base: # pull filename base:
[ -n "$2" ] || die "\ [ -n "$2" ] || die "\
Error: didn't find a file base name as the first argument. Error: didn't find a file base name as the first argument.