Actions
Feature #9883
closedAllow CAs to use randomized serials when signing
Start date:
11/04/2019
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Description
Various guidelines suggest using randomized serial numbers when signing certificates, rather than using sequential numbers.
Add an option to CA entries (off by default) which will allow them to generate random serial numbers when signing for extra security.
The generated numbers must be tested against all known serials for a given CA to avoid accidentally duplicating a serial.
Updated by Jim Pingle almost 5 years ago
- Status changed from In Progress to Feedback
- % Done changed from 0 to 100
Applied in changeset 2c9601c978589f34089f25cc7569ed67dbbc37e8.
Updated by Viktor Gurov almost 5 years ago
tested on pfSense 2.5.0.a.20191126.1832
it successfully creates random serials when creating certificates or signing CSR
Resolved
Updated by Jim Pingle almost 5 years ago
- Status changed from Feedback to Resolved
Actions