From de32572de12710e4bcec9f6969dcea91ebaf350c Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Sat, 7 May 2016 21:47:24 +0000 Subject: Exclude root certificate serial number from last_serial calculation, as including it ends very badly when the root certificate serial is a randomly-generated 64-bit value. See #814. svn path=/branches/tk705/; revision=6430 --- potpourri/ca-unpickle.py | 1 - 1 file changed, 1 deletion(-) (limited to 'potpourri/ca-unpickle.py') diff --git a/potpourri/ca-unpickle.py b/potpourri/ca-unpickle.py index 3b31e0ba..be8f8237 100755 --- a/potpourri/ca-unpickle.py +++ b/potpourri/ca-unpickle.py @@ -260,7 +260,6 @@ class Root(object): root_handle = str(uuid.uuid4()) rpki_root_last_serial = max( - rpki_root_cer.getSerial(), rpki_work_cer.getSerial(), self.iter_get(rpki_root_mft.get_POW().certs()).getSerial()) -- cgit v1.2.3