DOC: ssl: clarify the NID-based curve fetch branch

Document that the SSL_get_negotiated_group() path is used for OpenSSL
before 3.2 and AWS-LC API 35 or later. This only adds a comment and
does not change the fetch behavior.

diff --git a/src/ssl_sample.c b/src/ssl_sample.c
index ef5e6344cae27c0822ad375b98564cc3c5020b64..67552bfe83d56b9fdac406e9d0a5ba12281b4ff9 100644 (file)
--- a/src/ssl_sample.c
+++ b/src/ssl_sample.c
@@ -1779,6 +1779,7 @@ smp_fetch_ssl_fc_ec(const struct arg *args, struct sample *smp, const char *kw,
        if (!curve_name)
                return 0;
 # else
+       /* for OpenSSL < 3.2 and AWS-LC API >= 35 */
        nid = SSL_get_negotiated_group(ssl);
        if (!nid)
                return 0;