Skip to content
  • Helga Velroyen's avatar
    Backend: Use timestamp as serial no for server cert · 615d6f21
    Helga Velroyen authored
    
    
    So far, all of Ganeti's server certificates had the serial
    number '1'. While this works, it makes it hard to
    distinguish situations where the certificate is
    renewed from those where it wasn't. This patch uses
    a timestamp as serial number.
    
    While this is still not stricly according to the SSL RFC,
    it is at least a number that is stricly growing and we
    can be sure that no two different server certificates
    will have the same serial number.
    
    Signed-off-by: default avatarHelga Velroyen <helgav@google.com>
    Reviewed-by: default avatarKlaus Aehlig <aehlig@google.com>
    615d6f21