From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sun, 16 Dec 2012 22:15:29 +0000 (+0100)
Subject: doc update
X-Git-Tag: gnutls_3_1_6~25
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=906eeaebdd9bec9c22093ed19a9462aa2e5e6ed2;p=thirdparty%2Fgnutls.git

doc update
---

diff --git a/lib/x509/x509_write.c b/lib/x509/x509_write.c
index 77a26a802e..8c911808ef 100644
--- a/lib/x509/x509_write.c
+++ b/lib/x509/x509_write.c
@@ -932,9 +932,11 @@ gnutls_x509_crt_set_expiration_time (gnutls_x509_crt_t cert, time_t exp_time)
  * @serial_size: Holds the size of the serial field.
  *
  * This function will set the X.509 certificate's serial number.
- * Serial is not always a 32 or 64bit number.  Some CAs use large
- * serial numbers, thus it may be wise to handle it as something
- * uint8_t.
+ * While the serial number is an integer, it is often handled
+ * as an opaque field by several CAs. For this reason this function
+ * accepts any kind of data as a serial number. To be consistent
+ * with the X.509/PKIX specifications the provided @serial should be 
+ * a big-endian positive number (i.e. it's leftmost bit should be zero).
  *
  * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
  *   negative error value.