Hodie XIV Kal. Iun. MMXI, Tim Watts scripsit: > On 19/05/11 16:46, Peter Sylvester wrote: > >another approach is to take the value of 'time' (the current second) > >and append to it the current process number, and, in case of > >several machines, some number indicating the id of the machine. > > > >instead of the process number, any other method to ensure uniqueness > >within a second may be used. > > Ah yes - that would guarantee a non repeating unpredictable sequence. > > I was confuse initially as I did not realise the serial number could > be so big (16 bytes was it?).
20 bytes max, for the RFC5280. -- Erwann ABALEA <erwann.aba...@keynectis.com> Département R&D KEYNECTIS ----- If you never try anything new, you'll miss out on many of life's great disappointments. Demotivators, 2002 calendar ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org