From 1051c451663edcf06c070dabfdf50923a1fb5e3a Mon Sep 17 00:00:00 2001
From: Matthew Ames <SuperMatt@users.noreply.github.com>
Date: Wed, 18 Nov 2015 07:18:20 +0000
Subject: [PATCH] TLDs cannot be longer than 63 characters

---
 letsencrypt/configuration.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/letsencrypt/configuration.py b/letsencrypt/configuration.py
index f2d232c22..0ea539b5c 100644
--- a/letsencrypt/configuration.py
+++ b/letsencrypt/configuration.py
@@ -155,8 +155,8 @@ def _check_config_domain_sanity(domains):
             "Punycode domains are not supported")
     # FQDN checks from
     # http://www.mkyong.com/regular-expressions/domain-name-regular-expression-example/
-    #  Characters used, domain parts < 63 chars, tld > 1 char
+    #  Characters used, domain parts < 63 chars, tld > 1 < 64 chars
     #  first and last char is not "-"
-    fqdn = re.compile("^((?!-)[A-Za-z0-9-]{1,63}(?<!-)\\.)+[A-Za-z]{2,}$")
+    fqdn = re.compile("^((?!-)[A-Za-z0-9-]{1,63}(?<!-)\\.)+[A-Za-z]{2,63}$")
     if any(True for d in domains if not fqdn.match(d)):
         raise errors.ConfigurationError("Requested domain is not a FQDN")