Skip to content

Add option to increase max_cert_list parameter in OpenSSL #146

@abadmaev25

Description

@abadmaev25

By default OpenSSL has max_cert_list=100 KB, which is enough for classic certificates. But this value might be insufficient for post-quantum certificate chains when using algorithms with large signatures or in case of long chain length. This value can be changed by SSL_CTX_set_max_cert_list() call in OpenSSL, but pure nginx apparently does not provide API for this.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions