commit 347ada71cc7c6cae7e38a74360bd8434c4f31405
author Gilles Peskine <Gilles.Peskine@arm.com> Mon Jun 07 21:24:26 2021 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Mon Jun 07 21:30:15 2021 +0200
tree 6143bbc6411bb9f5bf26e130bcd7fc95556152a0
parent 806281a663e41af88c95581a2403fbbecd3f6624

Document more precisely what goes into the default profile

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index 4b53d1a..14c53fc 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -116,9 +116,8 @@
  */
 #define X509_MAX_VERIFY_CHAIN_SIZE    ( MBEDTLS_X509_MAX_INTERMEDIATE_CA + 2 )
 
-/*
- * Default profile
- */
+/* Default profile. Do not remove items unless there are serious security
+ * concerns. */
 const mbedtls_x509_crt_profile mbedtls_x509_crt_profile_default =
 {
 #if defined(MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES)