Re: Increment certificate serial numbers randomly

[Walter H.]

On 29.04.2014 22:32, Tim Hudson wrote:

On 30/04/2014 6:05 AM, Walter H. wrote:

On 29.04.2014 21:38, d...@deadhat.com <mailto:d...@deadhat.com> wrote:

greater true random number. There will be no collisions.

This all seems unecessarily complex. Make the serial number a 256 bit or

the serial number has maximum length ..., 256 bit is quite too big ..

In X.509 terms the serial number is an ASN1 integer value so there is no real length limit.

the maximum length is "defined" by the use of them; e.g. FF/TB accept only 128 bit or in other words,

they function properly with longer serial numbers;

smime.p7s
Description: S/MIME Cryptographic Signature