issue SCEP certs using 2 as the initial SerialNumber (#9087)

Related to #8167, from RFC5280:

> The serial number MUST be a positive integer assigned by the CA to
> each certificate. It MUST be unique for each certificate issued by a
> given CA (i.e., the issuer name and serial number identify a unique
> certificate).

Without this change, we're issuing two different certificates with the
same serial number (1, one) and issuer name:

1. One during `fleetctl generate mdm-apple`
1. One during the first SCEP enrollment

This commit is contained in:

Roberto Dip

2022-12-23 14:55:34 -03:00

committed by

GitHub

parent e191f47aed

commit 141fb5dbb0

5 changed files with 133 additions and 3 deletions

changes/8167-scep-serials

View File

				`@@ -0,0 +1 @@`
				`- Fixed an issue that made the first SCEP enrollment during the MDM check-in flow fail in a new setup.`