Added fixme note on TLS 1.2 PRF per ciphersuite.

diff --git a/lib/gnutls_algorithms.c b/lib/gnutls_algorithms.c
index 9b707558c0890a159791da05b01de551e9279054..7c0bf91b543bd8c83b23ed36a15cab6a6d3c8f5b 100644 (file)
--- a/lib/gnutls_algorithms.c
+++ b/lib/gnutls_algorithms.c
@@ -524,6 +524,11 @@ typedef struct
 
 #define CIPHER_SUITES_COUNT sizeof(cs_algorithms)/sizeof(gnutls_cipher_suite_entry)-1
 
+/* FIXME: what we don't handle here is TLS 1.2 requirement
+ * that each ciphersuite has it's own PRF algorithm. Now we
+ * assume that each one uses the SHA-256 PRF in TLS 1.2.
+ */
+
 static const gnutls_cipher_suite_entry cs_algorithms[] = {
   /* ANON_DH */
   GNUTLS_CIPHER_SUITE_ENTRY (GNUTLS_ANON_DH_ARCFOUR_MD5,