Paul Lorenz 8f69a7fcdc Increase certificate serial number namespace to 159 bits. Fixes #3945 ...

- draws certificate serial numbers from [1, 2^159 - 1] via crypto/rand, the largest
  value that DER-encodes within RFC 5280's 20-octet signed-integer limit
- ensures serials are strictly positive
- returns RNG errors from SerialGenerator.Generate instead of discarding them, and
  propagates them through ServerSigner/ClientSigner SignCsr
- adds a test asserting serial positivity and the 20-octet encoding bound

2026-06-08 13:39:53 -04:00

..

cert.go

Increase certificate serial number namespace to 159 bits. Fixes #3945

2026-06-08 13:39:53 -04:00

fingerprint.go

Move internal/certs to common. Remove some incidental files that weren't used.

2023-08-07 10:20:06 -04:00

serial_test.go

Increase certificate serial number namespace to 159 bits. Fixes #3945

2026-06-08 13:39:53 -04:00