#47863 [Opn->Fbk]: openssl_csr_sign() does not change serial value

From: Date: Tue, 08 Dec 2009 23:20:22 +0000
Subject: #47863 [Opn->Fbk]: openssl_csr_sign() does not change serial value
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-145547@lists.php.net to get a copy of this message 
 ID:               47863
 Updated by:       felipe@php.net
 Reported By:      laurent dot jouannic at cbsa dot fr
-Status:           Open
+Status:           Feedback
 Bug Type:         OpenSSL related
 Operating System: debian
 PHP Version:      5.2.9
 New Comment:

Please try using this snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows:

  http://windows.php.net/snapshots/




Previous Comments:
------------------------------------------------------------------------

[2009-04-01 15:06:13] laurent dot jouannic at cbsa dot fr

Description:
------------
When I manualy sign a certificate from the shell:
./CA.sh -sign
or
openssl ca -policy policy_anything -out newcert.pem -infiles
newreq.pem

the value in the file 'serial' increase  ($value++).

When I sign a certificate with php (openssl_csr_sign):
-the serial (file) doesn't change
-the new certificate has a good 'serial' value



Reproduce code:
---------------
	$CAcrt = file_get_contents("/usr/lib/ssl/misc/demoCA/cacert.pem");
	$serial_hexa = file_get_contents("/usr/lib/ssl/misc/demoCA/serial");
	$serial_dec_net=intval($serial_hexa,16); /*04*/

	$CAkey =
array(file_get_contents("/usr/lib/ssl/misc/demoCA/private/cakey.pem"),
"Gas/ZWmUkz7y2");
	
	echo "--".$serial_hexa."--";
	echo "<br>++".$serian_dec_net."++";
	


	$clientKeys = openssl_pkey_new();
	$dn = array(
		"countryName" => "FR",
		"stateOrProvinceName" => "Ain",
		"localityName" => "Jouan",
		"organizationName" => "Certificat client",
		"organizationalUnitName" => "Info",
		"commonName" => "www.abc.fr",
		"emailAddress" => "lolo@xp.fr"
	);
	$csr = openssl_csr_new($dn, $clientPrivKey);
	
	$config = array(
		"config" => "/etc/ssl/openssl.cnf",
	);

	$cert = openssl_csr_sign($csr, $CAcrt, $CAkey, 1095, $config, '04');
	openssl_x509_export($cert, $certout);
	echo $certout;
	openssl_pkcs12_export_to_file  ( $certout, "tmp/tito.p12"  ,
$clientPrivKey , "mimine")

Expected result:
----------------
The result is good, as the certificate, but the value inside 'serial'
doesn't change....



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=47863&edit=1

Thread (2 messages)

« previous php.bugs (#145547) next »