Add comments on some renego flags
diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 291810a..569fdb5 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -979,6 +979,7 @@
unsigned char renego_period[8]; /*!< value of the record counters
that triggers renegotiation */
#endif
+ /* needed for option break handshake with insecure peers */
int allow_legacy_renegotiation; /*!< allow legacy renegotiation */
const int *ciphersuite_list[4]; /*!< allowed ciphersuites / version */
#if defined(POLARSSL_SSL_SET_CURVES)
@@ -1039,6 +1040,7 @@
/*
* Secure renegotiation
*/
+ /* needed to know when to send extension on server */
int secure_renegotiation; /*!< does peer support legacy or
secure renegotiation */
#if defined(POLARSSL_SSL_RENEGOTIATION)