3 ms·
How does that mean the requirements are wrong? Larger than 8 byte serials are allowed in the certificates, as is mentioned in that thread. I don't see how the r
by johncolanduoni 8y ago
How does that mean the requirements are wrong? Larger than 8 byte serials are allowed in the certificates, as is mentioned in that thread. I don't see how the requirements of the CA forum and the certificate representation can be taken as inherently contradictory instead of simply requiring a larger than 8 byte serial.
- bluesign 8y agoIt is not contradictory but it can be confusing when many parties involved. You have some software to get key for serial from RNG, when you get 64 bit and put it to serial field, you feel it is ok. This is probably what happened in this case. But if requirements made sure lets say signature part is 64bit random + some extra (serial, identifier etc) forcing serial field to be one more octet, this could never happen.