On Tue, Nov 09, 2021 at 11:03:14AM +0000, Job Snijders wrote: > Hi all, > > Ties de Kock reported that the RIPE NCC Production CA's manifest is > likely to double in size during RFC 6489 key rollover events. Both old > and new entries will be listed. KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft > currently is 1.1 MB. > > OK?
I'm ok with that. Maybe we should bump even higher, say 8M? Isn't the main point to have a limit at all? I don't think it needs to be very tight. > > Kind regards, > > Job > > Index: extern.h > =================================================================== > RCS file: /cvs/src/usr.sbin/rpki-client/extern.h,v > retrieving revision 1.94 > diff -u -p -r1.94 extern.h > --- extern.h 5 Nov 2021 10:50:41 -0000 1.94 > +++ extern.h 9 Nov 2021 10:55:40 -0000 > @@ -609,7 +609,7 @@ int mkpath(const char *); > #define MAX_URI_LENGTH 2048 > > /* Maximum acceptable file size */ > -#define MAX_FILE_SIZE 2000000 > +#define MAX_FILE_SIZE 4000000 > > /* Maximum number of FileAndHash entries per manifest. */ > #define MAX_MANIFEST_ENTRIES 100000 >
