CHAD

> On Jul 7, 2014, at 11:11 PM, "Jeffrey Walton" <noloa...@gmail.com> wrote:
> 
> On Mon, Jul 7, 2014 at 9:59 PM, Barbe, Charles
> <charles.ba...@allworx.com> wrote:
>> I will try an ASN.1 decoder tomorrow. Thanks for the suggestion!
>> 
>> One thing I did try today was to have both servers generate their 
>> certificates using the same private key. Theoretically I would expect the 
>> two certs to then be exactly the same to the bit... I am not providing any 
>> domain or ip specific fields just so that I can do this comparison and made 
>> sure all other variable fields would be static.
> The serial numbers will likely be different.
> 

I explicitly set the serial to 1 so I could do a binary compare of the certs.

I'm beginning to think it could be my protocol implementation and not the cert 
itself. 

> Jeff
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           majord...@openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to