Make self signing option of 'x509' use random serial numbers too.

diff --git a/apps/x509.c b/apps/x509.c
index 5f5542a8298827117ff516baf4df9ab65167c5ae..dedd9f1a9a4893584ca60e7b9fcb142e1d0c1420 100644 (file)
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -593,12 +593,16 @@ bad:
                if ((x=X509_new()) == NULL) goto end;
                ci=x->cert_info;
 
-               if (sno)
+               if (sno == NULL)
                        {
-                       if (!X509_set_serialNumber(x, sno))
+                       sno = ASN1_INTEGER_new();
+                       if (!sno || !rand_serial(NULL, sno))
                                goto end;
                        }
-               else if (!ASN1_INTEGER_set(X509_get_serialNumber(x),0)) goto end;
+
+               if (!X509_set_serialNumber(x, sno)) 
+                       goto end;
+
                if (!X509_set_issuer_name(x,req->req_info->subject)) goto end;
                if (!X509_set_subject_name(x,req->req_info->subject)) goto end;