HN
Hacker News
Top
New
Best
Ask
Show
Jobs
Comment by cm2187 | Hacker News Reader
Full thread
cm2187
·
And that's where they realise they stored the serial number on an int32!
View on HN
GuyPostington
·
Here's the boulder CA function that generates serials
https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...
throwaway8941
·
Stable URL for posterity.
https://github.com/letsencrypt/boulder/blob/4184dc3fc997d51e...
knodi123
·
int32 is enough to store one cert per ipv4 address....
STRML
·
Which isn't really enough, considering SNI and subdomains.
Dylan16807
·
So a two month supply, since serial numbers don't get reused.
Reply on news.ycombinator.com