A new comment.
[openssl.git] / apps / s_client.c
index 44f228a31c4456e08225ca5f9594b8df15f5ccfa..f0c2280d2ec326e94fd980a0a677a7248e19eb20 100644 (file)
@@ -720,6 +720,11 @@ static void print_stuff(BIO *bio, SSL *s, int full)
                p=SSL_get_shared_ciphers(s,buf,BUFSIZ);
                if (p != NULL)
                        {
                p=SSL_get_shared_ciphers(s,buf,BUFSIZ);
                if (p != NULL)
                        {
+                       /* This works only for SSL 2.  In later protocol
+                        * versions, the client does not know what other
+                        * ciphers (in addition to the one to be used
+                        * in the current connection) the server supports. */
+
                        BIO_printf(bio,"---\nCiphers common between both SSL endpoints:\n");
                        j=i=0;
                        while (*p)
                        BIO_printf(bio,"---\nCiphers common between both SSL endpoints:\n");
                        j=i=0;
                        while (*p)