Increase # of bits for random serial numbers of certificates with PyOpenSSL backend (#90)

* Increase # of bits for random serial numbers of certificates with PyOpenSSL backend.

* Adjust algorithm to return a random number between 1000 and 2^160-1.
This commit is contained in:
Felix Fontein
2020-08-18 16:34:01 +02:00
committed by GitHub
parent 346c2f55ff
commit 430c6d0c1a
2 changed files with 13 additions and 3 deletions

View File

@@ -0,0 +1,2 @@
minor_changes:
- "openssl_certificate - the PyOpenSSL backend now uses 160 bits of randomness for serial numbers, instead of a random number between 1000 and 99999. Please note that this is not a high quality random number (https://github.com/ansible-collections/community.crypto/issues/76)."