From cb6af00e2a10e43fc7eb5cb90249769edefb39a3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= <mpg2@elzevir.fr>
Date: Mon, 5 Oct 2015 12:12:39 +0100
Subject: [PATCH] Add missing warning in doc

Found by Nicholas Wilson

fixes #288
---
 include/mbedtls/config.h | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 6e9d8f3df..68153efdc 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1246,6 +1246,8 @@
  * If set, the X509 parser will not break-off when parsing an X509 certificate
  * and encountering an unknown critical extension.
  *
+ * \warning Depending on your PKI use, enabling this can be a security risk!
+ *
  * Uncomment to prevent an error.
  */
 //#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION