From 7d6028364c891ab57a3326375656e0e3388a30af Mon Sep 17 00:00:00 2001 From: yasuoka Date: Wed, 10 Mar 2021 10:51:10 +0000 Subject: [PATCH] Expand the maximum length for CHAP challenge to 96 octets. npppd couldn't handle ICCN message which has a ProxyAuthenChallenge AVP longer than 24 octets. Juniper actually send such challenges. Reported and tested by Ryan Freeman. --- usr.sbin/npppd/npppd/ppp.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/usr.sbin/npppd/npppd/ppp.h b/usr.sbin/npppd/npppd/ppp.h index 1bb8bfc6cf3..937b7d5f1dc 100644 --- a/usr.sbin/npppd/npppd/ppp.h +++ b/usr.sbin/npppd/npppd/ppp.h @@ -1,4 +1,4 @@ -/* $OpenBSD: ppp.h,v 1.21 2017/08/12 11:20:34 goda Exp $ */ +/* $OpenBSD: ppp.h,v 1.22 2021/03/10 10:51:10 yasuoka Exp $ */ /*- * Copyright (c) 2009 Internet Initiative Japan Inc. @@ -82,7 +82,7 @@ #define MAX_USERNAME_LENGTH 256 #define MAX_PASSWORD_LENGTH 256 -#define MAX_CHALLENGE_LENGTH 24 +#define MAX_CHALLENGE_LENGTH 96 #define INADDR_IPCP_OBEY_REMOTE_REQ 0x00000000L -- 2.20.1