x509: IP in SAN: integration tests with SSL/TLS
diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index ff5f389..57fb6fd 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -1633,12 +1633,14 @@
#if defined(MBEDTLS_X509_CRT_PARSE_C)
/**
- * \brief Set hostname for ServerName TLS extension
- * (client-side only)
- *
+ * \brief Set hostname for ServerName TLS extension and verification
+ * of the server's certificate (client-side only)
*
* \param ssl SSL context
* \param hostname the server hostname
+ * Usually a DNS hostname, but other options are available,
+ * see the \c exp_name parameter of \c
+ * mbedtls_x509_crt_verify_with_profile()
*
* \return 0 if successful or MBEDTLS_ERR_SSL_ALLOC_FAILED
*/