Hi,

On Thu, Mar 03, 2016 at 01:18:59AM -0700, James Yonan wrote:
> To accomplish this, prepend 'x' before hex serial numbers, so they
> can be distinguished from decimal serial numbers.  For example:
> 
>   tls_serial_1 = "x4D:9B:7C:94"
> 
> is equivalent to:
> 
>   tls_serial_1 = "1302035604"
> 
> Currently, only PolarSSL generates hex serial numbers while
> OpenSSL returns decimal serial numbers.

we have this one in the community tree today:

commit f80a52b09eed8e5e0cad990c56ec99256d6cc2d0 (master)
commit 142d4dd2e98317a03ca9827f03fc4643fe922834 (release/2.3)

Author: Steffan Karger <stef...@karger.me>
List-Post: openvpn-devel@lists.sourceforge.net
Date:   Sun Apr 27 10:49:20 2014 +0200

    Make serial env exporting consistent amongst OpenSSL and PolarSSL builds.
    
    This changes the representation of the tls_serial_{n} environment variable
    from hex to decimal for PolarSSL builds, to match OpenSSL build behaviour.
    
    Because hex representation for serials makes sense too, and to ease
    transition for PolarSSL users, added tls_serial_hex_{n} that exports the
    serial in hex represenation for both crypto library backends.


so I think the intention of your patch has been achieved already.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: signature.asc
Description: PGP signature

Reply via email to