add comment

diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index 2daab57c758c7bfa2ce693af8e8b5f0c3bdff9ef..f86deeb8ac566817f5703a422cc2c5ee035d4875 100644 (file)
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -533,6 +533,8 @@ static int ssl3_check_client_hello(SSL *s)
        int ok;
        long n;
 
+       /* this function is called when we really expect a Certificate message,
+        * so permit appropriate message length */
        n=ssl3_get_message(s,
                SSL3_ST_SR_CERT_A,
                SSL3_ST_SR_CERT_B,