We have debian package 0.9.20030515 with RA. Our problem occurs when the Certificate Serial Number skip from 09 to 0A. The index.txt and serial files store the correct serial number. Certificate Serial field in the certificate and .pem files receives the correct number too. But the database receive a incorrect decimal number (16 in this example). The .msg file also receive the incorrect number, what causes sequence problem when sending e-mails to new users.
Anyone could help us?
Thanks in advance.
Hello, I use OpenCA 0.9.1.3, and I had the same problem too. I commented the line
$ret->{SERIAL} = hex ($ret->{SERIAL});
in X509.pm, and now I get right serials. In fact, it seems that 'getCertAttribute', which is called above, returns a decimal value, not a hexadecimal one. (I checked it with a simple 'print $ret->{SERIAL}').
Anyway, I haven't fully understood this behaviour: this subroutine should call 'openssl' command, which should return a hexadecimal value (if I run 'openssl x509 -in 0A.pem -noout -nameopt RFC2253 -serial', I get a hexadecimal value: 'serial=0A') ... maybe there is another hex() conversion somewhere in OpenCA code?
Hope this helps, Alberto
-- Email.it, the professional e-mail, gratis per te: http://www.email.it/f
Sponsor: Realizza i tuoi sogni con Blu American Express e vinci una Rover! Clicca qui Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=1853&d=14-11
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
