gnutls_x509_crt_get_dn: clarify null-termination of the output

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/lib/x509/x509.c b/lib/x509/x509.c
index 4e494d10e09f2e47d551798e1bfe21498397730e..b56f6195b212fbcb27e14f9e45d1a59a4464f27e 100644 (file)
--- a/lib/x509/x509.c
+++ b/lib/x509/x509.c
@@ -861,7 +861,8 @@ gnutls_x509_crt_get_issuer_dn_oid(gnutls_x509_crt_t cert,
  * described in RFC4514. The output string will be ASCII or UTF-8
  * encoded, depending on the certificate data.
  *
- * If @buf is null then only the size will be filled.
+ * The @buf returned will be null terminated and the @buf_size will account
+ * for the trailing null. If @buf is null then only the size will be filled.
  *
  * This function does not output a fully RFC4514 compliant string, if
  * that is required see gnutls_x509_crt_get_dn3().