Describe the restriction for length of openssl conf value string

ok and suggestion jmc@

1 files changed, 4 insertions, 2 deletions

diff --git a/src/lib/libcrypto/man/openssl.cnf.5 b/src/lib/libcrypto/man/openssl.cnf.5
index c38bc3c7f2..ae56869b8b 100644
--- a/src/lib/libcrypto/man/openssl.cnf.5
+++ b/src/lib/libcrypto/man/openssl.cnf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: openssl.cnf.5,v 1.6 2019/06/06 01:06:59 schwarze Exp $
+.\" $OpenBSD: openssl.cnf.5,v 1.7 2020/02/17 12:52:42 inoguchi Exp $
 .\" full merge up to: OpenSSL man5/config b53338cb Feb 28 12:30:28 2017 +0100
 .\" selective merge up to: OpenSSL a8c5ed81 Jul 18 13:57:25 2017 -0400
 .\"
@@ -50,7 +50,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: June 6 2019 $
+.Dd $Mdocdate: February 17 2020 $
 .Dt OPENSSL.CNF 5
 .Os
 .Sh NAME
@@ -134,6 +134,8 @@ This will work if the program looks up environment variables using
 the CONF library instead of calling
 .Xr getenv 3
 directly.
+The value string must not exceed 64k in length after variable expansion or an
+error will occur.
 .Pp
 It is possible to escape certain characters by using any kind of quote
 or the