Re: [Openca-Users] [OpenCA-Devel] Certificate serial number

[Joachim S. <js...@ac...>]

>>>>> "TP" == Tony Pobolsky <ton...@gm...> writes:

TP> In fact i thought that the serial numbers like 1f 42 28 5f 3c 88
TP> 0f 8e 3c 89 b3 84 were a hash of a serial numbers like 1, 2, 3,
TP> ... n ... n+1.

What good would that be?

You are aware that serial numbers are used to denote revoked
certificates in CRLs, are you?

I.e., they *must* be known, otherwise revocation would not work. The
very idea of `hiding' them is dubious, to say the least.

	Joachim

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Joachim Schrod				Email: js...@ac...
Roedermark, Germany