From 021a11500f2d7740efbe04b313e4cecd739036ec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= <mpg2@elzevir.fr>
Date: Mon, 5 Oct 2015 12:12:39 +0100
Subject: [PATCH] Add missing warning in doc

Found by Nicholas Wilson

fixes #288
---
 include/polarssl/config.h | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/polarssl/config.h b/include/polarssl/config.h
index 3a18f8a26..b7d8b6b26 100644
--- a/include/polarssl/config.h
+++ b/include/polarssl/config.h
@@ -331,8 +331,9 @@
  * If set, the X509 parser will not break-off when parsing an X509 certificate
  * and encountering an unknown critical extension.
  *
- * Uncomment to prevent an error.
+ * \warning Depending on your PKI use, enabling this can be a security risk!
  *
+ * Uncomment to prevent an error.
 #define POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
  */