Increase the allowed stapling file size

Some CA (like GlobalSign) have this problem
kn007 · Apr 4, 2020 · 0b83bc2 · 0b83bc2
1 parent 57773cb
commit 0b83bc2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Enable_BoringSSL_OCSP.patch b/Enable_BoringSSL_OCSP.patch
@@ -21,7 +21,7 @@ index 0bea5e7..334f1c2 100644
 +
 +    BIO            *bio;
 +    int             len;
-+    u_char          buf[1024];
++    u_char          buf[2048];
 +
 +    if (ngx_conf_full_name(cf->cycle, file, 1) != NGX_OK) {
 +        return NGX_ERROR;
@@ -44,7 +44,7 @@ index 0bea5e7..334f1c2 100644
 +        return NGX_ERROR;
 +    }
 +
-+    if (len >= 1000) {
++    if (len >= 2000) {
 +        ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
 +                      "Unexpected OCSP response file length: %d", len);
 +        return NGX_ERROR;