[openssl-users] Certificate serialnumber?

[Walter H.]

Hello,

I'm using openssl command-line in a Linux-Box (CentOS 6.x with squid) 
like this:

I havn't defined anything - everything is set default from the linux 
distribution
openssl req -new -newkey rsa:2048 -subj '/CN=Squid SSL-Bump 
CA/C=/O=/OU=/' -sha256 -days 365 -nodes -x509 -keyout ./squidCA.pem -out 
./squidCA.pem

the question: where does the serial number for this certificate come from?
is it random by default when nothing is said about it?

would this be also an option when using openssl like this:

openssl ca -batch -config any.cnf -name any_ca -md sha256 -startdate 
...  -enddate ... ....

Thanks.

-- 
Best regards,
Ing. Walter Höhlhubmer


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4312 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150705/aa7aadd0/attachment.bin>