On Wed, May 17, 2006, Phil Dibowitz wrote: > > Thanks for the quick reply. > > Hmm. Then why is it when I create a self-signed CA with openssl I get > the former displayed, but when when I then sign a cert with that CA, I > get the latter? I don't understand why it is using different byte lengths? >
Depends how the CA is set up. Some "cookbook" guides from various sources manually set up the OpenSSL serial number file to a small number. The standard OpenSSL tools such as CA.pl use a 64 bit random number for the serial number file. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
