X509_REQ_set_version() doesn't set the serial number.  
X509_set_serialNumber() does.

This ticket is now resolved.

[[EMAIL PROTECTED] - Mon Sep 16 14:16:49 2002]:

> I have been trying to generate an X.509 cert with a serial number 
other 
> than 0 on Windows 2K using the openssl  (0.9.6.g) application.
> 
> I have been unsuccessful :(.
> 
> When I look through the code I cannot see how I could be 
successful since 
> the routine
> 
> "X509_REQ_set_version(X509_REQ *x,long version)"
> 
> is only called in one place in req.c and the second argument is 
always "0L" 
> as in line 953:
> 
>          if (!X509_REQ_set_version(req,0L)) goto err; /* version 1 
*/
> 
> I have made the appropriate settings in my configuration file:
> 
> serial          = $dir/serial              # The current serial 
number
> 
> My command line is:
> 
> openssl req -config mta_root.conf -x509 -newkey rsa -out 
certs/MTA_Root.cer 
> -outform DER  -days 7330
> 
> Any guidance would be appreciated.  Thank you.
> 
> 
> Peter Grossman
> [EMAIL PROTECTED]
> 


-- 
Richard Levitte
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to