Document behaviour of mbedtls_ssl_get_peer_cid() for empty CIDs
diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index a0f9584..5cb15f5 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -165,11 +165,10 @@
if( ssl->state != MBEDTLS_SSL_HANDSHAKE_OVER )
return( MBEDTLS_ERR_SSL_BAD_INPUT_DATA );
- /* What shall we report if we have exchanged if both client
- * and server have used the CID extension, but negotiated
- * empty CIDs? This is indistinguishable from not using the
- * CID extension in the first place, and we're reporting
- * MBEDTLS_SSL_CID_DISABLED in this case. */
+ /* We report MBEDTLS_SSL_CID_DISABLED in case the CID extensions
+ * were used, but client and server requested the empty CID.
+ * This is indistinguishable from not using the CID extension
+ * in the first place. */
if( ssl->transform_in->in_cid_len == 0 &&
ssl->transform_in->out_cid_len == 0 )
{