From 92e803ea5b70febe3708e6e8914c25dd96331456 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Mon, 26 Aug 2024 11:59:48 +0200 Subject: [PATCH] Clarify "negotiating" Signed-off-by: Gilles Peskine --- include/mbedtls/ssl.h | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h index 273933196d..466c734d37 100644 --- a/include/mbedtls/ssl.h +++ b/include/mbedtls/ssl.h @@ -4927,7 +4927,9 @@ int mbedtls_ssl_get_session(const mbedtls_ssl_context *ssl, * subsystem must have been initialized by calling * psa_crypto_init() before calling this function. * Otherwise, the handshake may call psa_crypto_init() - * if it ends up negotiating TLS 1.3. + * if a negotiation involving TLS 1.3 takes place (this may + * be the case even if TLS 1.3 is offered but eventually + * not selected). */ int mbedtls_ssl_handshake(mbedtls_ssl_context *ssl);