From ded3ae500b52265803f10142d9cdfed1d7aa227d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= <mpg2@elzevir.fr> Date: Mon, 5 Oct 2015 12:12:39 +0100 Subject: [PATCH] Add missing warning in doc Found by Nicholas Wilson fixes #288 --- include/polarssl/config.h | 2 ++ 1 file changed, 2 insertions(+) diff --git a/include/polarssl/config.h b/include/polarssl/config.h index 422c8be95..21aa9fa6a 100644 --- a/include/polarssl/config.h +++ b/include/polarssl/config.h @@ -1157,6 +1157,8 @@ * If set, the X509 parser will not break-off when parsing an X509 certificate * and encountering an unknown critical extension. * + * \warning Depending on your PKI use, enabling this can be a security risk! + * * Uncomment to prevent an error. */ //#define POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION