dh: document why BER decoding rules are allowstmp-document-ber

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/dh.c b/lib/dh.c
index c8e84680f9..e265d1e3d0 100644
--- a/lib/dh.c
+++ b/lib/dh.c
@@ -465,6 +465,8 @@ gnutls_dh_params_import_pkcs3(gnutls_dh_params_t params,
 		return _gnutls_asn2err(result);
 	}
 
+	/* PKCS#3 doesn't specify whether DHParameter is encoded as
+	 * BER or DER, thus we don't restrict libtasn1 to DER subset */
 	result = asn1_der_decoding(&c2, _params.data, _params.size, NULL);
 
 	if (need_free != 0) {