Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create certs (go) uses always the same serial number #117

Open
edenhaus opened this issue Apr 19, 2021 · 0 comments
Open

Create certs (go) uses always the same serial number #117

edenhaus opened this issue Apr 19, 2021 · 0 comments

Comments

@edenhaus
Copy link
Contributor

Create certs uses always the same serial number and this leads to some errors when you recreate new certs before the old ones expire. Firefox will blocks the connection with the new certs as the old one is still in the cert store and both have the same serial number.

Workaround:

  • manually delete the old certs from the firefox cert store
  • or create the certs the manual ways as openssl uses for each cert a different serial number

Probably this issue exists also in other browser, but I havn't test it.

Below the corresponding source code line:

SerialNumber: big.NewInt(1653),

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant