Create certs (go) uses always the same serial number #117

New issue

Open

opened 2021-04-19 21:39:38 +02:00 by edenhaus · 0 comments

edenhaus commented

2021-04-19 21:39:38 +02:00

(Migrated from github.com)

Workaround:

manually delete the old certs from the firefox cert store
or create the certs the manual ways as openssl uses for each cert a different serial number

Probably this issue exists also in other browser, but I havn't test it.

Below the corresponding source code line:

9b1ae262a8/create_certs/src/create_certs.go (L92)

Create certs uses always the same serial number and this leads to some errors when you recreate new certs before the old ones expire. Firefox will blocks the connection with the new certs as the old one is still in the cert store and both have the same serial number. Workaround: - manually delete the old certs from the firefox cert store - or create the certs the manual ways as openssl uses for each cert a different serial number Probably this issue exists also in other browser, but I havn't test it. Below the corresponding source code line: https://github.com/bmartin5692/bumper/blob/9b1ae262a807ad9fe09b33841ba7054b23c91453/create_certs/src/create_certs.go#L92