Skip to content

Commit 1e94c7d

Browse files
caveman99mhaberler
authored andcommitted
init the serial with a random value
1 parent b76e659 commit 1e94c7d

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

src/SSLCert.cpp

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -223,10 +223,10 @@ static int cert_write(SSLCert &certCtx, std::string dn, std::string validityFrom
223223
goto error_after_cert;
224224
}
225225

226-
// Initialize the serial number
226+
// generate random serial number
227227
mbedtls_mpi_init( &serial );
228-
stepRes = mbedtls_mpi_read_string( &serial, 10, "1" );
229-
if (stepRes != 0) {
228+
stepRes = mbedtls_mpi_fill_random( &serial, 10, mbedtls_ctr_drbg_random, &ctr_drbg );
229+
if (stepRes != 0) {
230230
funcRes = HTTPS_SERVER_ERROR_CERTGEN_SERIAL;
231231
goto error_after_cert_serial;
232232
}

0 commit comments

Comments
 (0)