From: jasper <jasper@openbsd.org>
Date: Sun, 19 Aug 2018 18:03:35 +0000 (+0000)
Subject: double the allowed length for the 'tls ciphers' option
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=d193c4ff2b8498b736a8b727ed36ca2f551a824d;p=openbsd

double the allowed length for the 'tls ciphers' option

for example now it can hold the recommended cipher list from the mozilla
ssl config generator rather than failing with a "ciphers too long" error.

ok benno@ sthen@ tb@
---

diff --git a/usr.sbin/httpd/httpd.h b/usr.sbin/httpd/httpd.h
index 907989c9bfa..5cfbd996bad 100644
--- a/usr.sbin/httpd/httpd.h
+++ b/usr.sbin/httpd/httpd.h
@@ -1,4 +1,4 @@
-/*	$OpenBSD: httpd.h,v 1.138 2018/06/20 16:43:05 reyk Exp $	*/
+/*	$OpenBSD: httpd.h,v 1.139 2018/08/19 18:03:35 jasper Exp $	*/
 
 /*
  * Copyright (c) 2006 - 2015 Reyk Floeter <reyk@openbsd.org>
@@ -60,7 +60,7 @@
 #define HTTPD_LOGVIS		VIS_NL|VIS_TAB|VIS_CSTYLE
 #define HTTPD_TLS_CERT		"/etc/ssl/server.crt"
 #define HTTPD_TLS_KEY		"/etc/ssl/private/server.key"
-#define HTTPD_TLS_CONFIG_MAX	255
+#define HTTPD_TLS_CONFIG_MAX	511
 #define HTTPD_TLS_CIPHERS	"compat"
 #define HTTPD_TLS_DHE_PARAMS	"none"
 #define HTTPD_TLS_ECDHE_CURVES	"default"