Self-signed CA certificate cannot be signed due to serial value issue

An error has been prompted at the self-signed CA certificate:

[email protected] ssl]# OpenSSL ca-in master.csr-out master.crt-days 365Using configuration From/etc/pki/tls/openssl. Cnfcheck that the request matches the Signaturesignature okerror:serial number have already been issued, check the Database/serial_file for corruptionthe matching entry have the following detailstype:validexpires On:160802074104zser ial number:01file name:unknownsubject Name:/c=cn/st=henan/o=companyname/ou=linuxer/cn=www.example.com/[email prote Cted

Workaround:

[[email protected] ca]# echo 02 > serial[[email protected] ssl]#  openssl ca -in master.csr -out master.crt -days 365Using  configuration from /etc/pki/tls/openssl.cnfcheck that the request matches  the signaturesignature okcertificate details:         serial number: 2  (0x2)         Validity             Not Before: Sep  4  02:27:33 2015 gmt            not  after : sep  3 02:27:33 2016 gmt         Subject:            countryName                = cn             stateOrProvinceName       = Henan             organizationName           = Companyname             organizationalunitname    = linuxer             commonName                 = master.mysql.com             emailaddress              =  [email protected]        X509v3 extensions:             x509v3 basic constraints:                  CA:FALSE             Netscape Comment:                  OpenSSL Generated Certificate             X509v3 Subject Key Identifier:                  cc:e8:58:b9:82 :a9:ba:9d:b7:50:c5:53:2a:68:08:ce:9c:4f:05:e0             X509v3 Authority Key Identifier:                  keyid:91:0b:59:72:b0:9f:5e:69:ea:e6:ff:7d:a9:e1:14:f1:b7 :D E:f5:8ccertificate is to be certified until sep  3 02:27:33 2016 gmt  (365  Days) sign the certificate? [y/n]:y1 out of 1 certificate requests  certified, commit? [y/n]yWrite out database with 1 new  entriesdata base updated

The reason is because the original experiment because 01 signed the HTTPS protocol, it can not be signed normally.

This article is from the "Bread" blog, make sure to keep this source http://cuchadanfan.blog.51cto.com/9940284/1691273

Self-signed CA certificate cannot be signed due to serial value issue