add comment

diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index de840808447d6c663238beb242290887021d776b..e999c4e5c61898355a5df99aac318f62cda36c5d 100644 (file)
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -546,6 +546,8 @@ static int ssl3_check_client_hello(SSL *s)
        int ok;
        long n;
 
+       /* this function is called when we really expect a Certificate message,
+        * so permit appropriate message length */
        n=ssl3_get_message(s,
                SSL3_ST_SR_CERT_A,
                SSL3_ST_SR_CERT_B,