From e830fa559ce866b6c97722a0cc371157f0ce9617 Mon Sep 17 00:00:00 2001 From: inoguchi <> Date: Mon, 17 Feb 2020 12:52:42 +0000 Subject: Describe the restriction for length of openssl conf value string ok and suggestion jmc@ --- src/lib/libcrypto/man/openssl.cnf.5 | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/lib/libcrypto/man/openssl.cnf.5 b/src/lib/libcrypto/man/openssl.cnf.5 index c38bc3c7f2..ae56869b8b 100644 --- a/src/lib/libcrypto/man/openssl.cnf.5 +++ b/src/lib/libcrypto/man/openssl.cnf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: openssl.cnf.5,v 1.6 2019/06/06 01:06:59 schwarze Exp $ +.\" $OpenBSD: openssl.cnf.5,v 1.7 2020/02/17 12:52:42 inoguchi Exp $ .\" full merge up to: OpenSSL man5/config b53338cb Feb 28 12:30:28 2017 +0100 .\" selective merge up to: OpenSSL a8c5ed81 Jul 18 13:57:25 2017 -0400 .\" @@ -50,7 +50,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: June 6 2019 $ +.Dd $Mdocdate: February 17 2020 $ .Dt OPENSSL.CNF 5 .Os .Sh NAME @@ -134,6 +134,8 @@ This will work if the program looks up environment variables using the CONF library instead of calling .Xr getenv 3 directly. +The value string must not exceed 64k in length after variable expansion or an +error will occur. .Pp It is possible to escape certain characters by using any kind of quote or the -- cgit v1.2.3-55-g6feb