tree e9dbb2cd99e378dc08fe15ef03d2feb024cf7857
parent a2da9c7e4503930dbda5dde2479931e1ea807225
author Hanno Becker <hanno.becker@arm.com> 1539254189 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1650878235 +0200

Clarify documentation of mbedtls_x509_crt_profile

This commit fixes #1992: The documentation of mbedtls_x509_crt_profile
previously stated that the bitfield `allowed_pks` defined which signature
algorithms shall be allowed in CRT chains. In actual fact, however,
the field also applies to guard the public key of the end entity
certificate.

This commit changes the documentation to state that `allowed_pks`
applies to the public keys of all CRTs in the provided chain.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>