Add random serial# support.
authorRich Salz <rsalz@openssl.org>
Wed, 16 Aug 2017 19:49:25 +0000 (15:49 -0400)
committerRich Salz <rsalz@openssl.org>
Tue, 22 Aug 2017 13:00:04 +0000 (09:00 -0400)
Add -rand_serial to CA command and "serial_rand" config option.

Up RAND_BITS to 159, and comment why: now confirms to CABForum
guidelines (Ballot 164) as well as IETF RFC 5280 (PKIX).

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4185)


No differences found