commit cdb4dc9393d56c0f34d24e9814dae020c8f663cd
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Thu Jul 06 12:16:25 2017 +0200
committer Simon Butcher <simon.butcher@arm.com> Fri Jul 28 12:20:48 2017 +0100
tree 793adab8986a66aaa4190b14ebd7553f8bb0f184
parent 83765655ddcde1073f1831e510ecabc116f4c64f

Improve comments

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index 7d2cff1..8cb1923 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -2303,7 +2303,9 @@
     }
 
 exit:
-    /* prevent misuse of the vrfy callback */
+    /* prevent misuse of the vrfy callback - VERIFY_FAILED would be ignored by
+     * the SSL module for authmode optional, but non-zero return from the
+     * callback means a fatal error so it shouldn't be ignored */
     if( ret == MBEDTLS_ERR_X509_CERT_VERIFY_FAILED )
         ret = MBEDTLS_ERR_X509_FATAL_ERROR;