chaosrebel/pico-openpgp
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-openpgp.git synced 2026-08-20 19:47:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

Ensure PIV certificate serials are canonical

Browse Source 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos
2026-08-15 01:36:07 +02:00
parent 0ff8272720
commit 7fe9ab39b6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/openpgp/piv.c
+1 -1
View File
@@ -188,7 +188,7 @@ static int x509_create_cert(void *pk_ctx, uint8_t algo, uint8_t slot, bool attes
mbedtls_x509write_crt_set_validity(&ctx, "20240325000000", "20741231235959");
uint8_t serial[20];
random_fill_buffer(BYTE_ARRAY(serial, sizeof(serial)));
serial[0] &= 0x7F;
serial[0] = (serial[0] & 0x7F) | 0x01;
mbedtls_x509write_crt_set_serial_raw(&ctx, serial, sizeof(serial));
mbedtls_pk_context skey, ikey;
mbedtls_ecdsa_context actx; // attestation key