Building a CA fail

[Maagoul]

I am CA but it fail always in generating serial steps I execute the r509 --out root.cer --keyout root.key then I put my parameters but always it throw me this 👍

/usr/local/lib/ruby/gems/2.0.0/gems/r509-0.10.0/lib/r509/certificate_authority/signer.rb:146:in to_s': OpenSSL::BNError from /usr/local/lib/ruby/gems/2.0.0/gems/r509-0.10.0/lib/r509/certificate_authority/signer.rb:146:increate_serial'
from /usr/local/lib/ruby/gems/2.0.0/gems/r509-0.10.0/lib/r509/certificate_authority/signer.rb:130:in build_cert' from /usr/local/lib/ruby/gems/2.0.0/gems/r509-0.10.0/lib/r509/certificate_authority/signer.rb:81:inselfsign'
from /usr/local/lib/ruby/gems/2.0.0/gems/r509-0.10.0/bin/r509:111:in <top (required)>' from /usr/local/bin/r509:23:inload'
from /usr/local/bin/r509:23:in `

'

[reaperhulk]

Try running this script on your system and see what the output is:

require 'openssl'

rand = OpenSSL::BN.rand(96,0) # 96 bits is 12 bytes (octets).
serial = OpenSSL::BN.new((Time.now.to_f*1000000).to_i.to_s + rand.to_s)
puts serial.to_s

This is extracted from the code that failed

r509/lib/r509/certificate_authority/signer.rb

Line 146 in 761e714

serial = OpenSSL::BN.new((Time.now.to_f*1000000).to_i.to_s + rand.to_s)