Sandipan Gangopadhyay wrote: > > I am issuing a self signed (Root CA) certificate as follows - > ./openssl req -new -x509 -days 365 -key ca.key -out ca.crt > It writes a serial number 0 ! > > ./openssl ca takes the serial number from a source such as ./demoCA/serial > > How do I make openssl req in -x509 mode do the same or is there some other > way to set the serial such as -CAsetserial ? > There isn't any option to do this however since this has been frequently requested I've added an option req and x509. It will be in the next snapshot and should be fairly easy to adapt to older versions of OpenSSL. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Celo Communications: http://www.celocom.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
