Reduce chances of issuer and serial number duplication by use of random

initial serial numbers.

PR: 842

1 files changed, 3 insertions, 1 deletions

diff --git a/apps/req.c b/apps/req.c
index 5df8f89..16e27d1 100644
--- a/apps/req.c
+++ b/apps/req.c
@@ -919,7 +919,9 @@ loop:
 				}
 			else
 				{
-				if (!ASN1_INTEGER_set(X509_get_serialNumber(x509ss),0L)) goto end;
+				if (!rand_serial(NULL,
+					X509_get_serialNumber(x509ss)))
+						goto end;
 				}
 
 			if (!X509_set_issuer_name(x509ss, X509_REQ_get_subject_name(req))) goto end;