Reduce chances of issuer and serial number duplication by use of random

[openssl.git] / apps / req.c

diff --git a/apps/req.c b/apps/req.c
index 5df8f89fcd03f7223e56f2b4b9184400eece5991..16e27d1b38acbce8862571d73e30995ff2f59fd0 100644 (file)
--- a/apps/req.c
+++ b/apps/req.c
@@ -919,7 +919,9 @@ loop:
                                }
                        else
                                {
-                               if (!ASN1_INTEGER_set(X509_get_serialNumber(x509ss),0L)) goto end;
+                               if (!rand_serial(NULL,
+                                       X509_get_serialNumber(x509ss)))
+                                               goto end;
                                }
 
                        if (!X509_set_issuer_name(x509ss, X509_REQ_get_subject_name(req))) goto end;