doc fix

diff --git a/doc/cha-cert-auth.texi b/doc/cha-cert-auth.texi
index 8aad126c5d5a469830a8b8afa626133fd2868eb6..144de2c681dee403496f2c5b85d7487f27f9c76d 100644 (file)
--- a/doc/cha-cert-auth.texi
+++ b/doc/cha-cert-auth.texi
@@ -299,7 +299,7 @@ Although the verification of a certificate path indicates that the
 certificate is signed by trusted authority, does not reveal anything
 about the peer's identity. It is required to verify if the
 certificate's owner is the one you expect. For more information
-consult @xcite{RFC2818} and section @ref{ex:verify} for an example.
+consult @ref{gnutls_x509_crt_check_hostname}, section @ref{ex:verify} for an example, and @xcite{RFC2818}.
 
 @node Verifying a certificate using trust on first use authentication
 @subsection Verifying a certificate using trust on first use authentication

diff --git a/lib/gnutls_cert.c b/lib/gnutls_cert.c
index 61585af847df2e2c178c929e2fb55a7338cd4c48..605b7d8a2a39a5766884428fc28441f67c595c17 100644 (file)
--- a/lib/gnutls_cert.c
+++ b/lib/gnutls_cert.c
@@ -646,10 +646,7 @@ _gnutls_openpgp_crt_verify_peers (gnutls_session_t session,
  * gnutls_certificate_set_verify_limits().
  *
  * Note that you must also check the peer's name in order to check if
- * the verified certificate belongs to the actual peer.
- *
- * This function uses gnutls_x509_crt_list_verify() with the CAs in
- * the credentials as trusted CAs.
+ * the verified certificate belongs to the actual peer, see gnutls_x509_crt_check_hostname().
  *
  * Returns: a negative error code on error and %GNUTLS_E_SUCCESS (0) on success.
  **/