3 ms·
And that's where they realise they stored the serial number on an int32!
by cm2187 7y ago
And that's where they realise they stored the serial number on an int32!
- knodi123 7y agoint32 is enough to store one cert per ipv4 address....
- STRML 7y agoWhich isn't really enough, considering SNI and subdomains.
- Dylan16807 7y agoSo a two month supply, since serial numbers don't get reused.
- GuyPostington 7y agoHere's the boulder CA function that generates serials https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#L645-L666 https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...
- throwaway8941 7y agoStable URL for posterity. https://github.com/letsencrypt/boulder/blob/4184dc3fc997d51e3a71a6274a580fc7072ec536/ca/ca.go#L645-L666 https://github.com/letsencrypt/boulder/blob/4184dc3fc997d51e...