Richard Levitte via RT wrote:
> What happens is that if serial contains '00' when you sign, the 
> DB_serial field in index.txt will end up containing '0', not '00'.  
> The next time you try to sign a certificate, 'openssl ca' will 
> notice that the DB_serial field has an incorrect length (the length 
> should be a non-zero multiple of 2).
> 
> The reason this happens is that BN_bn2hex has a special case when 
> the bignum is 0: it gives you "0" back.  In all other cases, the 
> amount of hex digits will always be even.
> 
> The question is, of course, if one should correct BN_bn2hex() to 
> produce "00" for zero, or if ca.c should be changed to counter this 
> misfeature.  I'd like to make the correction in BN_bn2hex().  
> Opinions?

Sorry, but although I edited some source file, I am no programmer...

Olaf

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to