Infrastructure/AccountSystem2/CertificateProblem

Nalin Dahyabhai <nalin@redhat.com>
To: admin@fedoraproject.org

On Wed, May 23, 2007 at 11:13:34AM -0500, Mike McGrath wrote:
> Ahh, so this does actually prevent you from importing into firefox?  We
> can fix this but its just a matter of time to do it.  We're actually
> already working on the second iteration of the accounts system and we
> may have better luck fixing it there.  The current code base can be
> found here though:
>
> http://cvs.fedoraproject.org/viewcvs/fedora-accounts/?root=fedora

If I've already imported the CA certificate, it does prevent me from
importing my certificate.

Okay, I think I see the problem.  If I'm reading it right, gen-cert.cgi
creates a new "serial" file for every certificate issued.  OpenSSL
usually increments the value in that file when you issue a new
certificate, so preserving either the file or its contents between runs
should solve the problem.

I'm afraid I don't know enough about how the system is deployed to offer
suggestions about where to do that, though.