CVSROOT: /cvs Module name: src Changes by: r...@cvs.openbsd.org 2015/01/16 07:34:51
Modified files:
usr.sbin/relayd: relay.c
usr.sbin/smtpd : ssl.c
lib/libtls : tls_server.c
Log message:
The SSL/TLS session Id context is limited to 32 bytes. Instead of
using the name of relayd relay or smtpd pki, use a 32 byte arc4random
buffer that should be unique for the context. This fixes an issue in
OpenSMTPD when a long pki name could break the configuration.
OK gilles@ benno@
