Skip to content

Commit fa6abd4

Browse files
committed
Remove extraneous serial number generation step from openssl tutorial
1 parent e924b96 commit fa6abd4

File tree

1 file changed

+1
-10
lines changed

1 file changed

+1
-10
lines changed

articles/iot-hub/tutorial-x509-openssl.md

Lines changed: 1 addition & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -203,16 +203,7 @@ subjectKeyIdentifier = hash
203203

204204
## Step 6 - Create a subordinate CA
205205

206-
From the *subca* directory, create a new serial number in the *rootca/db/serial* file for the subordinate CA certificate.
207-
208-
```bash
209-
openssl rand -hex 16 > ../rootca/db/serial
210-
```
211-
212-
>[!IMPORTANT]
213-
>You must create a new serial number for every subordinate CA certificate and every device certificate that you create. Different certificates cannot have the same serial number.
214-
215-
This example shows you how to create a subordinate or registration CA. Because you can use the root CA to sign certificates, creating a subordinate CA isn’t strictly necessary. Having a subordinate CA does, however, mimic real world certificate hierarchies in which the root CA is kept offline and subordinate CAs issue client certificates.
206+
This example shows you how to create a subordinate or registration CA. Because you can use the root CA to sign certificates, creating a subordinate CA isn’t strictly necessary. Having a subordinate CA does, however, mimic real world certificate hierarchies in which the root CA is kept offline and subordinate CAs issue client certificates. Enter the following commands in the *subca* directory.
216207

217208
Use the configuration file to generate a private key and a certificate signing request (CSR).
218209

0 commit comments

Comments
 (0)