move SSL_load_client_CA_file() comment to where we moved the call to it

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93635 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/ssl_engine_init.c b/ssl_engine_init.c
index 3e0dbaaf43ec14f91608c3b6551a118dc4a7a676..89f62be2674deec634dd5c3a106a969fd8416c55 100644 (file)
--- a/ssl_engine_init.c
+++ b/ssl_engine_init.c
@@ -863,6 +863,12 @@ static void ssl_init_PushCAList(STACK_OF(X509_NAME) *skCAList,
                 "CA certificate: %s",
                 X509_NAME_oneline(name, name_buf, sizeof(name_buf)));
 
+        /*
+         * note that SSL_load_client_CA_file() checks for duplicates,
+         * but since we call it multiple times when reading a directory
+         * we must also check for duplicates ourselves.
+         */
+
         if (sk_X509_NAME_find(skCAList, name) < 0) {
             /* this will be freed when skCAList is */
             sk_X509_NAME_push(skCAList, name);
@@ -894,12 +900,6 @@ STACK_OF(X509_NAME) *ssl_init_FindCAList(server_rec *s, apr_pool_t *pp, const ch
      */
     skCAList = sk_X509_NAME_new(ssl_init_FindCAList_X509NameCmp);
 
-    /*
-     * note that SSL_load_client_CA_file() checks for duplicates,
-     * but since we call it multiple times when reading a directory
-     * we must also check for duplicates ourselves.
-     */
-
     /*
      * Process CA certificate bundle file
      */