updated documentation

diff --git a/lib/gnutls_x509.c b/lib/gnutls_x509.c
index 9ef0c04f5eed98714eaff13461e66af58147591a..8ae313569de3c6c61512c32c862634a219845760 100644 (file)
--- a/lib/gnutls_x509.c
+++ b/lib/gnutls_x509.c
@@ -1081,6 +1081,9 @@ certificate_credentials_append_pkey(gnutls_certificate_credentials_t res,
  * entity certificate (e.g., also an intermediate CA cert) then put
  * the certificate chain in @cert_list.
  *
+ * Note that the certificates and keys provided, can be safely deinitialized
+ * after this function is called.
+ *
  * Returns: %GNUTLS_E_SUCCESS (0) on success, or a negative error code.
  *
  * Since: 2.4.0

diff --git a/lib/x509/x509.c b/lib/x509/x509.c
index f03fd128b7ea2ad3b27eb541ce1d6a1a790ccd98..692955f4ccadce3de2a6e4c8c5efd6442316990e 100644 (file)
--- a/lib/x509/x509.c
+++ b/lib/x509/x509.c
@@ -3134,11 +3134,14 @@ gnutls_x509_crt_get_pk_dsa_raw(gnutls_x509_crt_t crt,
  *
  * This function will convert the given PEM encoded certificate list
  * to the native gnutls_x509_crt_t format. The output will be stored
- * in @certs which will be initialized.
+ * in @certs which will allocated and initialized.
  *
  * If the Certificate is PEM encoded it should have a header of "X509
  * CERTIFICATE", or "CERTIFICATE".
  *
+ * To deinitialize @certs, you need to deinitialize each crt structure
+ * independently, and use gnutls_free() at
+ *
  * Returns: the number of certificates read or a negative error value.
  *
  * Since: 3.0