Using RANDOM_SERIAL_SIZE of 8, OpenCA appears to generate a valid certificate 
with hex serial ID: 0xa3:f1:ed:4d:bf:06:30:8e. The proper decimal conversion of 
that value is 11813484215742640270, but the value of cert_key in the 
certificate table (using MySQL) is 9223372036854775807. When I try to use the 
GUI to view the certificate I get the error:
  [initServer:314] Cannot load certificate 11813484215742640270 from the 
database.

I suspect the GUI is doing the conversion the correct way, but whatever is 
loading the certificate into the database is generating the wrong value for 
cert_key. I get similar conversion errors if I generate other certs with other 
similarly sized random serial numbers. I do not get the error if my 
RANDOM_SERIAL_SIZE is small enough (i.e. 4). I’m using OpenCA 1.1.0, did I miss 
a patch somewhere that addresses this issue? I found the other patches on the 
OpenCA PKI Wiki site, but they don’t appear to help.
------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to