CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/29 00:12:19
Modified files:
lib/libssl : ssl_tlsext.c
Log message:
libssl: bump sigalg maximum to 256
With PQ algorithms getting more widely deployed, the formerly generous cap
of 32 sigalgs has long been known to be too tight for a while. A couple of
years back jmatthew ran into interop issues with the oqs provider being
enabled on OmniOS by default. OpenSSL 4.1 now announcing 39 sigalgs, this
is becoming a real-world problem and is first and foremost protecting us
from seamless interop with other stacks.
To this end, introduce a helper shared between client and server to cap
the list size and a macro similar to the one we have for supported groups.
Thanks to DabeDotCom for reporting.
Fixes https://github.com/libressl/portable/issues/1446
ok jsing
