From 0535c2d67ca2d684087ef90be35d5fb207aab227 Mon Sep 17 00:00:00 2001
From: Jeffrey Walton <noloader@gmail.com>
Date: Fri, 27 Jun 2014 16:33:06 +0100
Subject: [PATCH] Clarify docs.

Document that the certificate passed to SSL_CTX_add_extra_chain_cert()
should not be freed by the application.

PR#3409
---
 doc/ssl/SSL_CTX_add_extra_chain_cert.pod | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/doc/ssl/SSL_CTX_add_extra_chain_cert.pod b/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
index 11b3b4bbe3..8e832a57ea 100644
--- a/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
+++ b/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
@@ -24,6 +24,8 @@ the library will try to complete the chain from the available CA
 certificates in the trusted CA storage, see
 L<SSL_CTX_load_verify_locations(3)|SSL_CTX_load_verify_locations(3)>.
 
+The B<x509> certificate provided to SSL_CTX_add_extra_chain_cert() will be freed by the library when the B<SSL_CTX> is destroyed. An application B<should not> free the B<x509> object.
+
 =head1 RESTRICTIONS
 
 Only one set of extra chain certificates can be specified per SSL_CTX
-- 
2.25.1