doc update

diff --git a/doc/cha-gtls-examples.texi b/doc/cha-gtls-examples.texi
index 81c512e762a9f02cc4e4fe1fbc98992c0a975bdf..7233cc004c0549db16365afea538b36f0a458564 100644 (file)
--- a/doc/cha-gtls-examples.texi
+++ b/doc/cha-gtls-examples.texi
@@ -286,7 +286,11 @@ priority string.
 
 XSSL is an experimental API available in the @code{gnutls-xssl} library
 and in @code{gnutls/xssl.h} header. It is intended to be a very simple
-to use API avoid the GnuTLS API.
+to use API avoid the GnuTLS API. The API however has the following limitations
+@itemize
+@item It is applicable to blocking sockets only.
+@item The server verification is based on its DNS name.
+@end itemize
 
 @menu
 * Example client with X.509 certificate authentication::

diff --git a/lib/includes/gnutls/xssl.h b/lib/includes/gnutls/xssl.h
index a71bec190189636755903da98dd7bc3754c385e2..badf871b71c1fb02b86770e97b29799ecdc0ccfb 100644 (file)
--- a/lib/includes/gnutls/xssl.h
+++ b/lib/includes/gnutls/xssl.h
@@ -84,10 +84,13 @@ typedef enum
 
 typedef enum
 {
-  GNUTLS_CINPUT_CAS = 1,
-  GNUTLS_CINPUT_CRLS = 2,
-  GNUTLS_CINPUT_TOFU_DB = 3,
-  GNUTLS_CINPUT_KEYPAIR = 4,
+  GNUTLS_CINPUT_CAS = 1, /* i1 contains the CAs */
+  GNUTLS_CINPUT_CRLS = 2,/* i1 contains the CRLs */
+  GNUTLS_CINPUT_TOFU_DB = 3, /* i1 contains the DB filename */
+  GNUTLS_CINPUT_KEYPAIR = 4, /* i1 contains the certificate, i2 the key 
+                              * or i1.pin_fn contains the pin function, 
+                              * and i2.udata the user pointer */
+                              */
 } gnutls_cinput_contents_t;
 
 typedef struct gnutls_cinput_st {